Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

AWS RDS - HIPAA compliant?

I'm planning to have Oracle on AWS.

Is Oracle RDS HIPAA compliant? How can I make it HIPAA compliant?

like image 664
dang Avatar asked Mar 23 '15 16:03

dang


People also ask

Is AWS RDS HIPAA compliant?

All Amazon RDS database engines are now HIPAA-eligible. You can use Amazon RDS to build HIPAA-compliant applications and store healthcare related information, including protected health information (PHI) under an executed Business Associate Agreement (BAA) with AWS.

Is AWS Aurora HIPAA compliant?

Amazon Aurora and Amazon RDS for PostgreSQL are now HIPAA-eligible services. AWS has expanded its HIPAA compliance program to include Amazon Aurora and Amazon RDS for PostgreSQL.

Is Amazon HIPAA compliant?

Amazon Web Services has all the protections to satisfy the HIPAA Security Rule and Amazon will sign a business associate agreement with healthcare organizations. So, is AWS HIPAA compliant? Yes.


1 Answers

The answer just recently changed. RDS is now HIPAA compliant, per their documentation/FAQ:

What Services Can I Use in My AWS Account if I Have a BAA with AWS?

Customers may use any AWS service in an account designated as a HIPAA account, but they should only process, store and transmit PHI in the HIPAA-eligible services defined in the BAA. There are nine HIPAA-eligible services today, including Amazon DynamoDB, Amazon EBS, Amazon EC2, Amazon Elastic MapReduce (EMR), Amazon Elastic Load Balancer (ELB), Amazon Glacier, Amazon Relational Database Service (RDS) [MySQL and Oracle engines], Amazon Redshift, and Amazon S3.

Source

like image 149
Lucien Davison Avatar answered Oct 23 '22 02:10

Lucien Davison