Under HIPAA, which entity is directly responsible for safeguarding protected health information (PHI) when using a cloud service provider?
-
A
The cloud service provider only
-
B
The covered entity and its business associates
-
C
The U.S. Department of Health and Human Services
-
D
The patient whose data is stored