Security and Compliance with Microsoft Dynamics CRM (HIPAA & ISO27001)

As one of Microsoft’s top partners working with pharmaceutical companies and medical device manufacturers, Armanino Consulting has had many recent inquiries about HIPAA and other data compliance requirements as they pertain to Microsoft CRM Online.  As the US heads towards electronic medical records stored in the cloud, this topic seems to be top of mind for many of our clients and prospects.

 Let’s start with HIPAA.  In 1996, the Health Insurance Portability and Accountability Act, or HIPAA, was endorsed by the U.S. Congress.  Basically, it gives patients control over the use and disclosure of their health information.  This is done through establishing a national-level standard that healthcare providers must comply with.  I am sure all of you have experienced signing release forms which are required at almost every healthcare clinic, either for yourself or for a family member - that’s HIPAA.

 You will be happy to know that Microsoft CRM now has specific compliance around the HIPAA laws.  Microsoft will sign off for the HIPAA-Business Associate Agreement on request.

 In addition to meeting these HIPAA requirements, Microsoft also complies with the European Union (EU) Safe Harbor Clause and is Certified for ISO 27001 (a top security benchmark).

 Take a look here for all the details of Microsoft CRM Online Trust Principles and let us know how we can help your company with its CRM implementation.

 By Larry Betz, Managing Director of CRM at Armanino McKenna – the West Coast’s largest Gold Certified, Microsoft CRM Partner in Oregon, Washington, and California.