Necessity of HIPPA-Compliance for storing Healthcare Data
In an era where healthcare operators are fast falling behind if they aren’t on the internet, taking shortcuts for protected health information (PHI) becomes commonplace. While standard web hosting servers are capable of storing and serving healthcare data, they are incapable of providing services complying with the Health Insurance Portability and Accountability Act (HIPAA), or even providing a platform for a skilled developer to build HIPPA-compliant services and applications. The fundamental requirements of HIPPA compliance include transport and storage encryption, authorization, backups, and data integrity and disposal. HIPPA non-compliance should not be taken lightly, as it could lead to large fines, or, in extreme cases, imprisonment.
HIPPA-compliant hosting providers provide a foundation to build HIPPA-compliant services. HIPPA’s authorization requirement stipulates that only authorized people can access PHI—this is done through audited access controls. The data thus remains protected from people not having permission from inside the data center or over the network.
Healthcare data storage must be done carefully to ensure that it is not altered or tampered with. The easiest way to prevent data tampering is by encryption—this, however, is not a service that most web hosts provide easily. Ensuring whole-disk encryption is not only safer but also reduces complexity—it should become a standard part of HIPPA-compliant hosting plans.
Companies that process or store PHI information need to either build a HIPPA-compliant hosting platform or use the services of a third-party vendor providing the same. The second is the preferred option because only an experienced hosting provider can provide a trustworthy HIPPA business associate agreement.
While HIPPA-compliant hosting appears similar to standard web hosting, building a reliable platform empowering healthcare professionals in building HIPPA-compliant services requires effort.
By John Kamin, EVP and CIO, Old National Bancorp
By Gregg T. Martin, VP & CIO, Arnot Health
By Dave Doyle, CIO & SVP, IT, Regal Entertainment Group
By Sergey Cherkasov, CIO, PhosAgro
By Adrian Mebane, VP-Global Ethics & Compliance, The Hershey...
By Mike Fitton, Wireless Business Unit Director, Altera
By Jim Kaskade, VP and GM, Big Data & Analytics, CSC
By Thomas Musgrave, EVP & CIO, AmeriCold Logistics
By Vin Sharma, Director, Strategic Planning & Marketing, Big...
By Federico Flórez, Chief Information & Innovation Officer,...
By Barbara Adams, VP, Innovative Technology Solutions, Texas...
By John Mason, CIO, Bottomline Technologies
By Jamshid Khazenie, CTO, USA Today Network / Gannett
By Miguel Gamino, CIO & Executive Director-Department of...
By Bill Schimikowski, VP, Customer Experience, Fidelity...
By Tom Bressie, Vice President, Oracle Cloud
By John Landwehr, Public Sector CTO, Adobe
By Aaron Gette, CIO, The Bay Club Company
By Denise Zabawski, CIO, Nationwide Children's Hospital
By Amit Bahree, Executive, Global Technology and Innovation,...