[et_pb_section fb_built=”1″ _builder_version=”4.9.2″ _module_preset=”default” background_image=”https:\/\/sertalink.com\/wp-content\/uploads\/2023\/03\/purp2-1-1.png” background_position=”top_left” custom_padding=”13em||||false|false” hover_enabled=”0″ da_disable_devices=”off|off|off” custom_padding_last_edited=”on|phone” custom_padding_phone=”5em||||false|false” sticky_enabled=”0″ da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.9.2″ _module_preset=”default” animation_style=”zoom” animation_intensity_zoom=”10%” animation_starting_opacity=”100%”][et_pb_column type=”4_4″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_text _builder_version=”4.9.2″ _module_preset=”default” header_font=”Fjalla|700|||||||” header_text_color=”#FFFFFF” header_font_size=”50px” header_line_height=”1.2em” custom_margin=”||0px||false|false” custom_padding=”||||false|false” hover_enabled=”0″ header_font_size_last_edited=”on|phone” header_font_size_phone=”35px” header_line_height_last_edited=”on|phone” header_line_height_phone=”1.4em” sticky_enabled=”0″]<\/p>\n
[\/et_pb_text][et_pb_text _builder_version=”4.9.2″ _module_preset=”default” text_font=”Montserrat Regular||||||||” text_text_color=”#bfbfbf” text_font_size=”16px” header_font=”Fjalla|700|||||||” header_text_color=”#FFFFFF” custom_margin=”||||false|false” custom_padding=”||||false|false”]Homepage<\/a> \/ Data Governance & Compliance<\/a> \/ HIPAA Compliant Hosting for European-based Organizations[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.9.2″ _module_preset=”default” hover_enabled=”0″ da_disable_devices=”off|off|off” custom_padding_last_edited=”on|phone” custom_padding_phone=”10px||||false|false” sticky_enabled=”0″ da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.9.2″ _module_preset=”default” hover_enabled=”0″ width_last_edited=”on|phone” width_phone=”85%” sticky_enabled=”0″][et_pb_column type=”4_4″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_text admin_label=”Text” _builder_version=”4.9.2″ text_font=”Montserrat Regular||||||||” text_line_height=”1.5em” header_2_font=”Fjalla||||||||” header_3_font=”Fjalla||||||||” background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ use_border_color=”off” border_color=”#ffffff” border_style=”solid” text_font_size_last_edited=”on|phone” text_font_size_phone=”15px” sticky_enabled=”0″]<\/p>\n In order to host and\/or migrate medical data being transferred from the European Union (EU), US hosting providers have to undergo and partake in the U.S.-EU Safe Harbor certification process.<\/p>\n EU Directive 95\/46\/EC is the European Union mandate (in conjunction with the European Convention {EC}) for the protection of individuals with regard to Automatic Processing of Personal Data. Health information falls within the scope of this European Directive. U.S.-EU Safe Harbor Framework is a process for US organizations to comply with this European standard for privacy protection of personal data originating from countries participating in the EU.<\/p>\n When dealing with data protection of this nature, non-production (development) hosting environments are not bound to these regulations (if protected health information (PHI) and\/or electronic medical records (EMR) are not resident on these systems). Whereas the \u201ctransition\u201d and \u201cproduction\u201d systems would be required to follow these data protection constraints.<\/p>\n There are differences between US HIPAA Compliance and the US-EU Safe Harbor requirements. Health Information Portability and Accountability Act (HIPAA) is more of a guideline, whereas EU data privacy is more stringent when dealing with information protection and data security measures.<\/p>\n HIPAA Guidelines follow Code of Federal Regulations (CFR) by which to adhere for compliance; US-EU Framework uses the Safe Harbor Privacy Principles as the fundamental rules.<\/p>\n In short, HIPAA and US-EU Safe Harbor both serve the same purpose: the protection of private data (to include medical records and patient information).<\/p>\n \u2013 HIPAA is regulated by the US Federal Government [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" HIPAA Compliant Hosting for European-based Organizations Homepage \/ Data Governance & Compliance \/ HIPAA Compliant Hosting for European-based Organizations In order to host and\/or migrate medical data being transferred from the European Union (EU), US hosting providers have to undergo and partake in the U.S.-EU Safe Harbor certification process. EU Directive 95\/46\/EC is the European […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-15288","page","type-page","status-publish","hentry"],"yoast_head":"\n
\n\u2013 US-EU is regulated by the US Federal Government and the European Union
\n\u2013 Data being hosted in the US is bound to HIPAA, not to US-EU
\n\u2013 Data being hosted in the EU is not bound to HIPAA, nor to US-EU
\n\u2013 Data being hosted in the US [containing private data transferred from EU to US] is bound to HIPAA and US-EU<\/p>\n