Verizon launches HIPAA-compliant eHealth cloud service
The hosted service includes a business associate agreement
Computerworld - Verizon's Enterprise Solutions group today unveiled a cloud services portfolio for the healthcare industry that it said can meet federal Health Insurance Portability and Accountability Act (HIPAA) requirements for safeguarding electronic health information.
Verizon is building its new SaaS and hosted services off its acquisition of cloud services provider Terremark and security services provider Cybertrust. Verizon is using two former Terremark data centers in Miami, Fla., and Culpeper, Va.
The new health-care-enabled services are: Colocation, managed hosting, public enterprise cloud and enterprise private clouds.
The Verizon data centers meet HIPAA security controls as well as other security requirements, according to Dr. Peter Tippett, chief medical officer and vice president of Verizon's health IT practice. Not only do the facilities meet HIPAA's physical security standards, Tippett said, but they comply with policy standards, meaning employees are trained in handling sensitive patient data.
The healthcare industry is notoriously wary of using third-party technology providers for fear of data breaches involving sensitive patient information. For example, only 16.5% of healthcare providers use any public or private clouds, according to research firm IDC. By comparison, 25.9% of financial services companies, another highly sensitive marketplace, use either public or private clouds, according to IDC.
Like a medical billing company that becomes a business associate of a healthcare provider, Verizon said it will sign a business associate agreement (BAA) with its customers showing it is HIPAA compliant.
"Healthcare is in the dark ages when it comes to the use of IT," Tippett said. "When your doctor refers you to another doctor [in another healthcare system], they typically dictate a letter and send it to the other doctor by mail. The only legacy technology that get a pass on security and privacy of HIPAA is the fax and telephone.
"HIPAA doesn't necessarily require a BAA for storing data, but ... having a BAA for data future-proofs the cloud strategy for the healthcare organization," Tippett said.
Through cloud services, healthcare professionals can collaborate, share patient information in near real-time and store large volumes of data for electronic health records and radiology images. In addition, healthcare organizations can centralize data so they can operate more efficiently, Tippett said.
While most large vendors such as IBM, Cisco, and Dell offer cloud services for healthcare, Verizon said it has separated itself from competitors by offering a BAA. Doing so makes Verizon as culpable for data loss or breaches as the healthcare company.
Lynne Dunbrack, an analyst with IDC Health Insights, said she was unaware if any other public cloud offerings that offer BAAs. She call the move an important differentiator.
"Two-thirds of data breaches can be attributed to the theft of a device. That speaks to policy. And, that's part of the program Verizon is offering by training its employees. They've got a programmatic approach," she said.
Lucas Mearian covers storage, disaster recovery and business continuity, financial services infrastructure and health care IT for Computerworld. Follow Lucas on Twitter at @lucasmearian or subscribe to Lucas's RSS feed . His e-mail address is firstname.lastname@example.org.
Healthcare and IT
- HIPAA rules, outdated tech cost U.S. hospitals $8.3B a year
- How big data will save your life
- WebMD, Qualcomm build consumer cloud for mobile health data
- Lack of healthcare IT workers slows tech progress
- U.S. doctors don't believe patients need full access to health records
- Bill Clinton calls for healthcare price transparency, embracing IT to cut costs
- Physicians may be marginalized as mobile tech engages us in healthcare
- IBM: Watson will eventually fit on a smartphone, diagnose illness
- Hospitals need to copy airline, bank, retail e-business models
- Health providers can't find, keep IT staff
Read more about Healthcare IT in Computerworld's Healthcare IT Topic Center.
- The 20 Best iPhone/iPad Games of 2013 So Far
- 9 Steps to Build Your Personal Brand (and Your Career)
- 7 Consumer Technologies Coming to an Enterprise Near You
- 11 Signs Your IT Project is Doomed
- A walking tour: 33 questions to ask about your company's security
- 15 social media scams
- The 7 elements of a successful security awareness program
With the promise of big data (solving the unsolvable problems, informing better decision making, creating new products and services, discovering patterns and acting on them, etc.) on the horizon, what has really changed? Does this mean that everything we know and do with not-so-big data should be tossed?
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Case Study: Hospital Turns to Email Archiving Solution to Ensure Regulatory Compliances
- Read this case study to learn how a cloud-based email archiving solution enabled the hospital to meet government mandates and helps avoid thousands...
- Case Study: In-the-Cloud Email Service Replaces Three Point Products
- Read this case study for more information on a comprehensive in-the-cloud email service to help replace three point products.
- Case Study: Simplifying the Transition to Exchange 2010 with Email Management Solutions
- Read this case study to learn how a cloud-based email management solution greatly simplified the company's transition to Exchange 2010.
- Intelligent Systems: A Prescription for Health Care Transformation
- Facing an onslaught of regulatory changes and market pressures, health care providers are grappling with how to transform existing services as part of...
- The Importance of Network Time Synchronization
- Your network is time stamping files, email, transactions, etc., while your server logs are recording the transactions in case you need that information.... All Healthcare IT White Papers
- Becoming An Analytics Driven Organization
- Join us on Tuesday, June 18, 2013, 11:00 AM EDT and learn how your agency can create an analytics culture that will enable...
- 3 Reasons Why Sepaton is the World's Fastest Backup Solution
- Leading analyst, Storage Switzerland learns how Sepaton backs up and deduplicates massive data volumes while maintaining the industry's fastest performance - all in...
- Enterprise File Sharing: All You Need to Know
- Security. Scalability. Control. These are just some of the many benefits of enterprise cloud file-sharing that you'll discover in this KnowledgeVault, packed with...
- Bridging HTTP and FTP with FileXpress Internet Server
- What if you could take an FTP server on your internal network, and allow external users (partners or customers) to securely access it...
- MFT and FileXpress - An Overview
- Business users and applications exchange files on a regular basis. File transfer is a core part of the flow of business activity. All Healthcare IT Webcasts