From the course: Cloud Security Operations by Pearson

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

Issues with PHI and PII in the cloud

Issues with PHI and PII in the cloud

Cloud consumers or customers must be conscious of jurisdictional laws and regulations as well as cultural and religious sensitivities when exposing data to customers on public virtual servers through API gateways or with content delivery or content distribution networking. Cloud-based tokenization engines are popular solutions for anonymizing PII, personal identifiable information, and PHI, personal health information, in various data sets. In cloud computing, the legal responsibility for data processing falls to the consumer, custodian, or controller who uses the services of a cloud service provider. As in all other cases in which the third party is given the task of processing personal data, the user or data controller is responsible for ensuring that relevant requirements are met and that things are protected and that requirement compliance for PII and PHI are met. On the exam, It's important to be able to understand the difference between contractual PII and regulated PII…

Contents