By Dr. Jose I. Delgado
During the last couple of years, I have been approached by multiple healthcare professionals and organizations asking about the legalities of using companies that do not reside in the USA (offshore businesses) to handle electronic protected health information (EPHI). While there are recommendations we would like for anyone to consider prior to hiring any of these companies the reality is that HIPAA does not discriminate between US businesses and offshore companies.