IBM obtains "health data host" (HDS) certification

[ad_1]

The law of January 26, 2016 of "modernization of our health system" replaced the procedure for the approval of health data hosts by a certification issued by a certifying body accredited by the French Accreditation Committee (Cofrac), recalls- your.

The scope of the certification obtained by IBM covers the 6 fields of application provided for in the repository of requirements relating to the protection of personal health data, which are:

  • the provision and maintenance in operational condition of the physical sites allowing to host the hardware infrastructure of the information system used for the processing of health data

  • provision and maintenance in operational condition of the physical infrastructure of the information system used for processing health data

  • the provision and maintenance in operational condition of the information system application hosting platform

  • provision and operational maintenance of the virtual infrastructure of the information system used for processing health data

  • administration and operation of the information system containing health data

  • outsourced backups of health data.

The activity n ° 5 subject to certification, and which relates to the administration and the exploitation of the information system containing the health data proposed by "managed hosts", is currently the subject of a debate. Regarding an activity "exogenous" to most hosts, it could be deleted.

"The IBM Services data centers in France as well as those of IBM cloud (in Paris and Frankfurt) have been audited and certified HDS by Bureau Veritas, a firm accredited by the French authorities to carry out HDS audits ", the American group underlined in a press release.

Structures wishing to engage in a certification process can apply to one of the 7 certification bodies: Afnor, Bureau Veritas, BSI, EY (Ernst & Young), ICTS, LNE and LSTI, we recall. .

The list of HDS certified hosts is available on the website of the Shared Health Information Systems Agency (Asip Santé).

[ad_2]