3 ms·

Yeah... HIPAA is definitely tough. I'd check out https://www.aptible.com https://www.aptible.com if you haven't already. It will at least help out with the infr

Yeah... HIPAA is definitely tough. I'd check out https://www.aptible.com https://www.aptible.com if you haven't already. It will at least help out with the infrastructure side of things. Although it does seem like Heroku is offering some services that help too (https://blog.heroku.com/announcing-heroku-shield https://blog.heroku.com/announcing-heroku-shield). It's definitely not enough alone, but at least gets you going on the security & compliance aspects.

noir_lord 8y ago
I'm in the UK and our rules are different, we don't have anything directly equivalent to HIPAA (I suspect because we don't currently have the huge number of private hospitals/doctors the US has) in fact even finding out the exact standards you'd have to comply with for the UK is a challenge. GDPR is good in that regard as the standards are high and apply to more than just electronic storage/interchange.
- DanBC 8y ago
  People have to follow the Data Protection Act. Are these useful? Here's the Code of Practice for NHS organisations and staff: https://www.gov.uk/government/publications/confidentiality-nhs-code-of-practice https://www.gov.uk/government/publications/confidentiality-n... Here's the other code of practice for everyone working with NHS data: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/codes-of-practice-for-handling-information-in-health-and-care https://digital.nhs.uk/data-and-information/looking-after-in... And here's the guidance about when to share if it's needed: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/codes-of-practice-for-handling-information-in-health-and-care/a-guide-to-confidentiality-in-health-and-social-care https://digital.nhs.uk/data-and-information/looking-after-in...

noir_lord 8y ago

I'm in the UK and our rules are different, we don't have anything directly equivalent to HIPAA (I suspect because we don't currently have the huge number of private hospitals/doctors the US has) in fact even finding out the exact standards you'd have to comply with for the UK is a challenge. GDPR is good in that regard as the standards are high and apply to more than just electronic storage/interchange.

DanBC 8y ago
People have to follow the Data Protection Act. Are these useful? Here's the Code of Practice for NHS organisations and staff: https://www.gov.uk/government/publications/confidentiality-nhs-code-of-practice https://www.gov.uk/government/publications/confidentiality-n... Here's the other code of practice for everyone working with NHS data: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/codes-of-practice-for-handling-information-in-health-and-care https://digital.nhs.uk/data-and-information/looking-after-in... And here's the guidance about when to share if it's needed: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/codes-of-practice-for-handling-information-in-health-and-care/a-guide-to-confidentiality-in-health-and-social-care https://digital.nhs.uk/data-and-information/looking-after-in...