We are working on a medical app for children. (Of course parents will access the application.)

Is it lawful to store children's health records on a webserver?

My client says it's illegal; that we should always store the data on a remote local server to protect the minor's protected information.

Is this the case?

  • Are you asking for all of these countries, or for any of these countries? That is, do you want the answer to consider them all, or would just one be sufficient? – jimsug Sep 28 '15 at 12:19
  • 4
    "remote local server" -- what could that possibly mean? – feetwet Sep 28 '15 at 14:36
  • @feetwet Local server means your own iphone or android device, Remote server means somewhere on the hosting companies datasource – user580950 Sep 30 '15 at 13:34

In the United States, the main statute governing the use of health care information is HIPAA, the Health Insurance Portability and Accountability Act.

HIPAA and its related statutes and regulations detail what you can and can't do with medical information. You can't always collect it; if you do, you can't always share it, and you can't always delete it.

This is a complex field of law and it's easy to screw up in a way that would cause big, serious, company-destroying, job-ending problems for everyone involved.

To put this another way: this is absolutely, positively, not something you want to get advice on from strangers on the internet. You don't just need a lawyer; you need a HIPAA specialist--or the equivalent in whatever other countries you plan to operate in--before you push anything out to real-life patients, especially children.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.