ChaptersCircleEventsBlog
Share how your organization manages AI securely. Take the CSA and Google enterprise AI Survey today!

Download Publication

Protecting the Privacy of Healthcare Data in the Cloud
Protecting the Privacy of Healthcare Data in the Cloud

Protecting the Privacy of Healthcare Data in the Cloud

Release Date: 08/10/2021

The Health Delivery Organization (HDO) needs to understand the relationship between privacy and security, particularly the differences. This understanding will enable the HDO to implement a privacy risk management program to address privacy concerns. The HDO must be concerned with Protected Health Information (PHI) and personally identifiable information (PII) and provide mitigating controls for both types of information. In this paper, the author will address the issue of privacy engineering and risk management, various privacy laws and regulations, and how to comply throughout the cloud data lifecycle. This paper will benefit privacy engineers, privacy officers, and information security specialists. 
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
View translations
Related resources
Zero Trust Automation & Orchestration and Visibility & Analytics Overview
Zero Trust Automation & Orchestration and Visib...
Zero Trust Guidance for IoT
Zero Trust Guidance for IoT
State of SaaS Security Report 2025
State of SaaS Security Report 2025
Policy-as-Code vs. IaC Security: What’s the Real Difference?
Policy-as-Code vs. IaC Security: What’s the Real Difference?
Published: 07/08/2025
Why Identity Automation Fails at 96% of Organizations
Why Identity Automation Fails at 96% of Organizations
Published: 07/07/2025
How Mature is Your NHI Security Program?
How Mature is Your NHI Security Program?
Published: 07/07/2025
AI in Cybersecurity: 5 Practical Use Cases for Stronger Defense
AI in Cybersecurity: 5 Practical Use Cases for Stronger Defense
Published: 07/01/2025

Acknowledgements

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Michael Roza is a seasoned risk, audit, control and compliance, and cybersecurity professional with over 20 years of experience across multinational enterprises and startups. As a Cloud Security Alliance (CSA) Research member for over 10 years, he has led and contributed to more than 140 CSA projects spanning Zero Trust, AI, IoT, Top Threats, DecSecOps, Cloud Key Management, Cloud Control Matrix, and many others.

He has co-chaired...

Read more

Vincent Campitelli
Vincent Campitelli

Vincent Campitelli

After retiring from McKesson Corporation in 2016, Vince joined the Office of the President within the Cloud Security Alliance (CSA). Serving as an Enterprise Security Specialist, Vince supports the vast membership base of CSA in consuming and leveraging the numerous services, tools and expanding scope of research devoted to Cloud Computing. With his background in both the healthcare and financial service industries, Vince actively works wit...

Read more

Alex Kaluza
Alex Kaluza
Research Analyst, CSA

Alex Kaluza

Research Analyst, CSA

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training