<story><title>iCloud Uploads Local Data Outside of iCloud Drive</title><url>https://datavibe.net/~sneak/20141023/wtf-icloud/</url></story><parent_chain><item><author>epistasis</author><text>Clouds are almost universally antithetical to HIPAA, it&amp;#x27;s extremely rare to find a SaaS provider that will sign a  HIPAA BAA.&lt;p&gt;And anyone working with data under HIPAA had better know this already!</text></item><item><author>kps</author><text>Last I looked, iCloud was not HIPAA¹-compliant. Health-care workers who previously could have iCloud enabled, as long as they did not use it for HIPAA-covered documents, may be in for a big and expensive surprise.&lt;p&gt;¹ &lt;a href=&quot;http://www.hhs.gov/ocr/privacy/hipaa/understanding/&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.hhs.gov&amp;#x2F;ocr&amp;#x2F;privacy&amp;#x2F;hipaa&amp;#x2F;understanding&amp;#x2F;&lt;/a&gt;</text></item></parent_chain><comment><author>patio11</author><text>Right, which is why I don&amp;#x27;t have any HIPAA-covered data in Dropbox, but my risk assessment does not include &amp;quot;I have Dropbox installed on my machine, ergo, I need to be careful to &lt;i&gt;never access HIPAA-covered info from my machine&lt;/i&gt;&amp;quot;, which is apparently the level of care I now need for Yosemite.  (An upgrade which just got delayed indefinitely, for the obvious reason.)</text></comment>
<story><title>iCloud Uploads Local Data Outside of iCloud Drive</title><url>https://datavibe.net/~sneak/20141023/wtf-icloud/</url></story><parent_chain><item><author>epistasis</author><text>Clouds are almost universally antithetical to HIPAA, it&amp;#x27;s extremely rare to find a SaaS provider that will sign a  HIPAA BAA.&lt;p&gt;And anyone working with data under HIPAA had better know this already!</text></item><item><author>kps</author><text>Last I looked, iCloud was not HIPAA¹-compliant. Health-care workers who previously could have iCloud enabled, as long as they did not use it for HIPAA-covered documents, may be in for a big and expensive surprise.&lt;p&gt;¹ &lt;a href=&quot;http://www.hhs.gov/ocr/privacy/hipaa/understanding/&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;www.hhs.gov&amp;#x2F;ocr&amp;#x2F;privacy&amp;#x2F;hipaa&amp;#x2F;understanding&amp;#x2F;&lt;/a&gt;</text></item></parent_chain><comment><author>frostmatthew</author><text>VMware&amp;#x27;s vCloud Air does: &amp;quot;&lt;i&gt;To help customers comply with HIPAA and HITECH, VMware offers a Business Associate Agreement (BAA) to all interested customers using our US-based data centers.&lt;/i&gt;&amp;quot;[1]&lt;p&gt;[Full disclosure: I work on vCloud Air]&lt;p&gt;[1] &lt;a href=&quot;http://vcloud.vmware.com/service-offering/security-compliance&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;vcloud.vmware.com&amp;#x2F;service-offering&amp;#x2F;security-complianc...&lt;/a&gt;</text></comment>