Cloud Storage of PHI
Web-based products such as Gmail, Google Docs and Dropbox should not be used to transmit or store a patient’s protected health information (PHI). These products do not have the proper encryption and other security measures necessary to be considered secure under the HIPAA regulations. Using these products to transmit or store a patient’s protected health information could be considered a HIPAA violation and thus subject us to potential penalties.