HIPAA Statement: SOS Online Backup

1. SOS HIPAA STATEMENT
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) was the
result of efforts by the federal government to ensure healthcare data practices
permitted ease for patients to move jobs, insurance and healthcare providers.
As defined by 45 CFR §164.312 of HHS’ HIPAA, SOS Online Backup assist healthcare
providers to be HIPAA compliant in the following ways:
• SOS Online Backup, in all cases, creates, receives and transmits only encrypted data.
SOS uses a three-tiered AES encryption system which encrypts data on the user’s
computer, again in transit and finally when at rest in storage at SOS’s datacenters.
• This data cannot be read while in transit, or even on the SOS servers, as long as the
user (health care provider) does not compromise the password (for example, writing
the password on a sticky note and attaching it to a computer screen in open view.)
• SOS servers are located in a SAS 70 II datacenters protected by gated access, 24 x 7
x 365 on-site staffed security and technicians, electronic card key access, and strategically
placed security cameras both inside and outside the building.
• SOS Online Backup is an automated offsite backup and protects data against hardware
malfunction, accidental deletion, virus attacks, theft and natural disasters.
• SOS’s Ultrasafe allows the user (health care provider) to store their data securely such
that no one including SOS engineers will be able to access their data.
A “business associate” agreement is not required with SOS. These agreements are between
covered entities where there IS a reasonable probability that Protected Health Information can
be reviewed.
Privacy regulations contained in HIPAA apply to “Electronic Private Health Information” and SOS
does not possess this.
As SOS cannot and does not examine the data, no business associate agreement is required.
For more information or questions, email: info@sosonlinebackup.com
or visit us at www.sosonlinebackup.com/privacy.htm
© SOS Online Backup. All rights reserved. SOS-HIPAA-1.2/09