Azure Database for PostgreSQL – Hyperscale (Citus): New toolkit certifications generally available

You can now use Azure Database for PostgreSQL – Hyperscale (Citus) for workloads that require your database to be The Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act, System and Organization Controls (SOC) 2 Type 2, Commodity Futures Trading Commission (CFTC) 1.31, Dubai Electronic Security Center (DESC) and NHS Information Governance (NHS IG) toolkit compliant.

• The Health Insurance Portability and Accountability Act (HIPAA) and the regulations issued under HIPAA are a set of US healthcare laws that, among other provisions, establish requirements for the use, disclosure, and safeguarding of protected health information (PHI). HIPAA applies to covered entities - doctors’ offices, hospitals, health insurers, and other healthcare companies - that create, receive, maintain, transmit, or access PHI.
• System and Organization Controls (SOC) for Service Organizations are internal control reports created by the American Institute of Certified Public Accountants (AICPA). They are intended to examine services provided by a service organization so that end users can assess and address the risk associated with an outsourced service.
• The Commodity Futures Trading Commission (CFTC), an independent US federal agency, regulates the commodity futures and options markets and, more recently, the swaps market. The long-standing CFTC Rule 1.31 defines records retention requirements established by SEC Rule 17a-4(f).
• The DESC sets out requirements and guidance for cloud service providers and those organizations using any cloud services. Compliance with this standard is mandatory for all cloud service providers wishing to offer cloud services for Dubai government and semi-government entities.
• The NHS IG Toolkit is a data security and protection toolkit that all organizations must use if they have access to National Health Service (NHS) patient data and systems as a part of the healthcare system in the United Kingdom.

Learn more.