A cloud service provider supplies cloud-based computing, storage, applications, platforms, or infrastructure. Under HHS guidance, a CSP that creates, receives, maintains, or transmits ePHI on behalf of a covered entity or business associate is itself a business associate, including certain encrypted “no-view” arrangements.
« Back to Glossary Index
« Back to Glossary Index