> False. I work for a company in the education space that uses AWS. We're unambiguously bound by FERPA. It is inconceivable to me that a stricter law like HIPAA

> False. I work for a company in the education space that uses AWS. We're unambiguously bound by FERPA. It is inconceivable to me that a stricter law like HIPAA wouldn't also bind cloud-based companies. I think the GP was asserting that the NSA doesn't care about HIPAA, not asserting something about HIPAA and Amazon & companies using AWS.