HIPAA Assessed Regions and Services

Below are the regions and services that have been assessed by independent assessors to meet the requirements of the Security, Breach Notification, and Privacy Rules of the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended, in accordance with the Standards set forth in HIPAA Administrative Simplification Regulation Text 45 CFR Part 164 Subpart—Security Standards for the Protection of electronic Protected Health Information, Subpart—Notification in the Case of Breach of Unsecured Protected Health Information, and Subpart—Privacy of Individually Identifiable Health Information, as amended (the Criteria). The information below lists all regions and all services assessed within Oracle Cloud's Infrastructure as a Services and Platform as a Service offering.