Actually, yes. HIPAA -- the Health Information Portability and Accountability Act -- is the watchword in medical recordkeeping, these days, and cloud storage is

Actually, yes. HIPAA -- the Health Information Portability and Accountability Act -- is the watchword in medical recordkeeping, these days, and cloud storage is a major point of failure if you don't do it right. Neither DrChrono nor the linked article mention HIPAA, except to say they're compliant. They need to say how they're compliant, give details up front. I'd be more willing to take them seriously if they discussed the topic more like this: The Nirvanix Cloud Storage Network meets the healthcare industry's need for secure archives. You can use policy-based replication to store data at multiple storage nodes that meet SAS 70 compliance. Nirvanix solutions encrypt data both in flight and at rest and enable you to instantly verify the integrity of your files. You also can make data securely available to selected users. We even seamlessly migrate data to new discs on standard refresh cycles, eliminating the complexities of long-term retention. With its secure long-term storage, the Nirvanix cloud will help you to comply with HIPAA Privacy and HIPAA Security Rules as well as other mandates for data privacy. (http://www.nirvanix.com/solutions/healthcare.aspx http://www.nirvanix.com/solutions/healthcare.aspx) Here's a few other links that discuss the topic in a more informative manner: http://www.hipaacompliancejournal.com/2009/05/cloud-storage-and-hipaa-compliance/ http://www.hipaacompliancejournal.com/2009/05/cloud-storage-... http://billkos.squarespace.com/hit-journal/2010/1/21/cloud-storage-services-that-claim-hipaa-compliance.html http://billkos.squarespace.com/hit-journal/2010/1/21/cloud-s... http://hipaaaudit.com/2010/06/22/do-no-evil-says-google/ http://hipaaaudit.com/2010/06/22/do-no-evil-says-google/ EDIT: Replaced Nirvanix quote with the correct paragraph. Oh, and I don't represent the company. Just picked 'em out of a search.