Geek asks and answers

Microsoft Azure HIPAA Database Compliance

I am studying healthcare development on Microsoft Azure; however, they told me that SQL Server Azure is not compatible with HIPAA. Now I heard that Azure Web Development and virtual machines are HIPAA compliant. Question: Are local databases compatible with Azure Virtual Machines HIPPA (e.g. SQL Server Compact, MySQL, etc.)? I know this is a vague question, but Azure seems like a great development platform. Thanks

+5
source share
1 answer

Not that virtual machines are compatible with HIPAA; rather, a BAA may be offered for virtual machine applications. The application itself must still pass any compliance.

If you look at the Azure Trust Center , you will see detailed information about the HIPAA BAA, as well as a link to the Azure HIPAA Implementation Guide .

I am not a lawyer and cannot advise you on the subtle details of HIPAA and your application. However, I read the compliance guide , and it only calls Windows Azure SQL as if not in scope . For virtual machines, the responsibility lies with you to deal with certain things. From the doc:

, , , , , , .

+9

More articles:


All Articles