The article provides a good summary of some of the myths surrounding the issue of cloud computing and the requirements for HIPAA compliance. Please take a few moments to review the article. As for the record retention policy of 6 years, do you think that time frameis too long, too short or reasonable? Why? In addition, after reviewing the article's list of touted "cloud benefits for health care organizations," do you think the benefits outweigh the potential security/privacy risks and costs involved for health care organizations? Why or why not?

https://www.hipaajournal.com/cloud-computing-hipaa-compliance/