Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Georgia loves Google’s cloud, but now it needs HIPAA compliancy

Brandon Butler | Feb. 23, 2016
Cloud providers evolve their platforms to be HIPAA compliant

Everyone from judges to clerks and mediators to court reporters in Georgia traditionally have submitted to a dreaded annual process of manually sent in paperwork to renew their eligibility to work in state court system. They picked up forms at the courthouse or downloaded a PDF, filled them out in pen and sent them in to the state. The process would take about three to four weeks -- and that’s if there weren’t any unexpected issues to resolve.

In 2013 the state’s Administrative Office of the Courts cut employees a break: It contracted with a consultancy near Atlanta named ScotCro that built a custom application to digitize the entire process. The app accepts online submissions, sends them to the appropriate contact at the state and allows for digital approval. It keeps records of how many workers register, tracks where they’re registering, and helps state officials plan which areas need more or less resources.

ScotCro built the application in the cloud. “We jumped with both feet in to Google App Engine,” CEO Robert McMillan says.

Google App Engine (GAE) is a platform as a service (PaaS), meaning that ScotCro engineers didn’t have to provision virtual machines or configure databases in the cloud. They wrote code that ran in GAE, and Google’s cloud took care of the rest.

“I’ve designed and managed data centers, and I’ll never go back to hardware again,” McMillan says.

Georgia estimates that its new digital process has saved the equivalent of four full-time workers. The app has gotten rave reviews, except from a 92-year-old judge who - rumor has it - refused to use a computer and retired when the app went live. The state has since rolled out the app to include seven business units that process applications and renewals. ScotCro has taken a two- to three-week process and literally turned it into a 2 to 3 minute one, all thanks to the cloud.

Now ScotCro is hoping to land a new project, but McMillan is wondering whether he’ll be able to use the cloud for this, too.

Here comes HIPAA

The next project is for a different agency -- that McMilllan can’t disclose -- that is negotiating with ScotCro to build an app for tracking residents who have received state services, and involves sensitive patient medical information. So the app must be compliant with the federal Health Insurance Portability and Accountability Act (HIPAA) along with the Health Information Technology for Economic and Clinical Health (HITECH) to safeguard digital health data.

While Google Compute Engine (GCE), a public cloud Infrastructure-as-a-Service offering that provides virtual machines, storage and databases, is eligible to be HIPAA compliant, the GAE is not yet.

 

1  2  Next Page 

Sign up for CIO Asia eNewsletters.