1

We are working on a medical app for children. (Of course parents will access the application.)

Is it lawful to store children's health records on a webserver?

My client says it's illegal; that we should always store the data on a remote local server to protect the minor's protected information.

Is this the case?

Improve this question
3
  • Are you asking for all of these countries, or for any of these countries? That is, do you want the answer to consider them all, or would just one be sufficient?
    – jimsug
    Commented Sep 28, 2015 at 12:19
  • 4
    "remote local server" -- what could that possibly mean?
    – feetwet ♦
    Commented Sep 28, 2015 at 14:36
  • @feetwet Local server means your own iphone or android device, Remote server means somewhere on the hosting companies datasource
    – TSCAmerica.com
    Commented Sep 30, 2015 at 13:34

1 Answer 1

Reset to default
3

In the United States, the main statute governing the use of health care information is HIPAA, the Health Insurance Portability and Accountability Act.

HIPAA and its related statutes and regulations detail what you can and can't do with medical information. You can't always collect it; if you do, you can't always share it, and you can't always delete it.

This is a complex field of law and it's easy to screw up in a way that would cause big, serious, company-destroying, job-ending problems for everyone involved.

To put this another way: this is absolutely, positively, not something you want to get advice on from strangers on the internet. You don't just need a lawyer; you need a HIPAA specialist--or the equivalent in whatever other countries you plan to operate in--before you push anything out to real-life patients, especially children.

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .