If a Cloud Services vendor says that they are HIPAA Compliant, may I use them when PHI is involved?No. Check first with the Office of Compliance Services (InfoSecAll@mednet.ucla.edu) that the vendor is indeed compliant with HIPAA and University policies and that the right Agreements are in place. | |
|