(ISC)2
CCSP · Question #884
Which U.S. regulation specifically governs the protection of personal health information in the cloud?
The correct answer is C. Health Insurance Portability and Accountability Act (HIPAA). HIPAA mandates safeguarding Protected Health Information (PHI). If you store patient health data in the cloud for a covered entity, HIPAA compliance is required. GDPR is EU-focused, SOX is finance, and the FTC Act is general.
Submitted by krish.m· Apr 18, 2026Legal, Risk and Compliance
Question
Which U.S. regulation specifically governs the protection of personal health information in the cloud?
Options
- ASarbanes-Oxley Act (SOX)
- BGeneral Data Protection Regulation (GDPR)
- CHealth Insurance Portability and Accountability Act (HIPAA)
- DFederal Trade Commission (FTC) Act
How the community answered
(21 responses)- A5% (1)
- C86% (18)
- D10% (2)
Explanation
HIPAA mandates safeguarding Protected Health Information (PHI). If you store patient health data in the cloud for a covered entity, HIPAA compliance is required. GDPR is EU-focused, SOX is finance, and the FTC Act is general.
Topics
#HIPAA#Healthcare Data#Regulations#Compliance
Community Discussion
No community discussion yet for this question.