Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

HIPAA in on SQL Azure, on hosted SQL 2008 R2 or only on premises? Expand / Collapse
Author
Message
Posted Thursday, December 12, 2013 12:11 PM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Tuesday, April 15, 2014 11:01 AM
Points: 346, Visits: 595
I've been asked to investigate moving part or all data processing off premises, and acting on a tip from twitter, I encountered what I think may be a show stopper. While it seems that Office is covered by MS on the HIPAA BAA, if you read to scope section at the very bottom of this document:
http://www.windowsazure.com/en-us/support/trust-center/compliance/
it seems that SQL Azure is exempt from the HIPAA BAA, which I think makes it a non-starter for HIPAA sensitive applications.
Am i reading this wrong?

Does this mean that HIPAA sensitive data must be maintained on premises or is it acceptable buy hosted database services from Amazon or Rackspace et al but not on SQL Azure?
Thanks for your help, as I am in the dark!
Post #1522447
Posted Wednesday, December 18, 2013 12:35 PM


SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: 2 days ago @ 12:57 PM
Points: 32, Visits: 130
Windows Azure services have been expanding their compliance initiatives over the years, but I believe your interpretation is correct that WASD is not currently included in the HIPAA BAA.

Keep an eye on that compliance statement page to ensure that you have the most up to date information.

Karen
Post #1524309
Posted Wednesday, December 18, 2013 12:43 PM
Old Hand

Old HandOld HandOld HandOld HandOld HandOld HandOld HandOld Hand

Group: General Forum Members
Last Login: Tuesday, April 15, 2014 11:01 AM
Points: 346, Visits: 595
Thank you so much for your confirmation, even though I wouldn't call it good news
That said, I did get a real good laugh out of seeing you described as a rookie <g>.
Thanks again
drew
Post #1524319
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse