I once did Client work that required certain data protection practices. Can anyone speak to Microsofts draw in that regard. Is it up to the standard you need if

I once did Client work that required certain data protection practices. Can anyone speak to Microsofts draw in that regard. Is it up to the standard you need if you work at a hospital or something like that?