News & Insights
Related Professionals
Practice Areas
Contact
Patricia O'Connell
Senior Communications Manager
202.719.4532
poconnell@wileyrein.com
Kirk Nahra Comments on HIPAA Obligations For Cloud Service Providers
Kirk J. Nahra, chair of Wiley Rein’s Privacy Practice and co-chair of the Health Care Practice, was quoted in an October 7 Politico article regarding recent guidance issued by the U.S. Department of Health and Human Services’ Office for Civil Rights. The guidance states that cloud service providers that process or store patient health data for their health care service provider clients must be classified as business associates. As a result, these companies must sign a business associate agreement with their clients and comply with regulations under the Health Insurance Portability and Accountability Act (HIPAA).
Reactions to the guidance were mostly positive, according to the article. “Most cloud companies have accepted [being a business associate],” said Mr. Nahra. “Not all have.”
Mr. Nahra added that the regulations are unlikely to be a significant burden. “If their security is actually good, it should be easy for them to comply.”
To read the full article, please click here.
SIGNAL Group (formerly McBee Strategic Consulting, LLC) is a wholly owned subsidiary of Wiley Rein. SIGNAL is a total solutions provider—advocacy, strategic communications, research, and digital media—for clients seeking to engage the federal government to achieve competitive advantage, influence public policy, establish new markets, and secure public capital.