Are there any laws or regulations about storing PHI for Caid/care members in overseas servers?
4 replies (most recent on top)
Storage and access are two different questions. Storage is onshore only for all business - company policy. Access - some states prohibit offshore access and / or require filing - Medicaid and commercial both. Highly regulated industry.
There are several Medicaid markets that have specific contract language prohibiting offshore work of any kind which would mean PHI cannot leave the country.
Not sure about Medicare maybe in a CFR but Medicaid is based on the individual state contracts and there are no laws around that.
Yes - storage is only onshore.