Download Publication

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translated content falls outside of the CSA Research Lifecycle. For any questions and feedback, contact research@cloudsecurityalliance.org.

The Health Delivery Organization (HDO) needs to understand the relationship between privacy and security, particularly the differences. This understanding will enable the HDO to implement a privacy risk management program to address privacy concerns. The HDO must be concerned with Protected Health Information (PHI) and personally identifiable information (PII) and provide mitigating controls for both types of information. In this paper, the author will address the issue of privacy engineering and risk management, various privacy laws and regulations, and how to comply throughout the cloud data lifecycle. This paper will benefit privacy engineers, privacy officers, and information security specialists.