Comment
Comment by ph33t
Interesting that they mention medical records. I'm pretty sure that US HIPAA law would preclude storing any medical records from being stored on a network whose owner you don't have a BA with. From my readings (see Digital Ocean's various discussions on the topic) this even includes data that is chunked and encrypted before sending off to storage. HIPAA laws are woefully vague and inadequate to deal with many new technologies. I'm not trying to argue for or against storing PHI in this matter, just pointing that they reference it, but I'm not sure it could be implemented in the US and be in compliance with current laws.