Developers need better guidance around cloud storage/computing and the Security Rule. Client-server architecture is no longer relevant in many cases. Health technology companies are typically now 100 percent cloud-based. Many clients are doing some type of data analytics work, or offer cloud-based EHRs and medical devices. HHS should provide good guidance for companies that are cloud based and virtual. Most companies now don’t necessarily have a physical location, everyone is working from home, and accessing data via VPN (virtual private network). The current rule just doesn’t apply to these new business models.
Question No. 6