Although not expressly in the linked content, I believe the change apropos beyond healthcare providers is the change for cloud providers (SaaS, storage, etc.) N

Although not expressly in the linked content, I believe the change apropos beyond healthcare providers is the change for cloud providers (SaaS, storage, etc.) Now, companies which store Protected Health Information (PHI) in the cloud are considered business associates of the healthcare provider. In turn, the companies are now regulated entities & will be required to meet the security & privacy standards of patient data. No longer is a storage provider considered an unassociated 'conduit.' This is a significant change for healthcare providers and all their (remote) technology partners. Ideally, this will create the regulatory impetus sufficient to prevent your healthcare providers from transitioning over to relatively insecure services such as Gmail for sensitive patient data.