PostgresSQL and HIPAA compliance

From: Alex John <alex(dot)john(at)holmusk(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: PostgresSQL and HIPAA compliance
Date: 2016-06-17 10:03:32
Message-ID: 81632DEC-4DDE-49CD-A421-0E2C5A9E222E@holmusk.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hello, I have a few questions regarding the use of PostgreSQL and HIPAA
compliance. I work for a company that plans on storing protected health
information (PHI) on our servers. We have looked at various solutions for doing
so, and RDS is a prime candidate except for the fact that they have explicitly
stated that the Postgres engine is *not* HIPAA compliant.

Users on the IRC channel generally say that the guidelines are more catered
towards building better firewalls and a sane access policy, but I would like to
know if there is anything within the implementation of Postgres itself that
violates said compliance.

If anyone works at a similar company and utilizes postgresql to store PHI,
please let me know.

Thank you,
Alex

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Oleg Bartunov 2016-06-17 11:10:28 Re: Question about RUM-index
Previous Message Durgamahesh Manne 2016-06-17 08:46:01 Re: Re: regarding schema only migration from sqlserver to postgres with runmtk.sh