Healthcare Security – Activity 2

Activity 2: HIPAA Activity (100 points)

A two-page response is required.

A new patient from Ireland has filled out all the personal information and medical history forms that Hospital X requires to begin treatment. The Hospital X admin uploads all the information into a healthcare data management system managed by Vendor Y in the cloud.

Based on this scenario, identify who is the data subject, data controller, and data processors. Explain your reasoning in making these designations. Specify which parties are required to comply with HIPAA and additional regulations they may need to comply with as well.