Back to Forum Back to Top

Browsing:

What is the best practice for storing human research data in a cloud?

Cloud human research data

Back to Forum

Browsing: What is the best practice for storing human research data in a cloud?


Rubi Linares-Orozco

Posts: 21
posted

Hello,

I am helping with drafting a policy for storing human research data on cloud storage systems (PHI and non-PHI data).
Curious as to what other institutions or researchers use to guide them in developing best practices for securely maintaining and protecting their research data?

Best,
Rubi Linares-Orozco

Sara Meeder

Posts: 20
posted in reply to rubi linares-orozco

Hi Rubi-

A lot depends on which cloud storage system you're using. I know the cloud system we work with has a specific business affiliate addendum for HIPAA compliance. I haven't worked with other systems, but have to assume they all have similar agreements. The addendum should address specific aspects of 45 CFR 164, like reporting requirements, designated data sets and customer/user responsibilities.

Best,
Sara

Nadir Weibel

Posts: 5
posted

Microsoft OneDrive is approved by UCSD for HIPAA

https://blink.ucsd.edu/technology/file-sharing/onedrive/

Google Drive is currently not supported at UCSD (https://blink.ucsd.edu/technology/file-sharing/google/), but they have a HIPAA compliant component that can be agreed upon by institutions (https://support.google.com/a/answer/3407054?hl=en). Other institutions might allow its now or in the future.

Nadir