The Health Insurance Portability and Accountability Act (HIPAA), Security Standards for the Protection of Electronic Protected Health Information (HIPAA Security Rule), and the Notification in the Case of Breach of Unsecured Protected Health Information were enacted as a part of the American Recovery and Reinvestment Act of 2009 (HITECH Breach Notification Requirements) for the security and privacy of Protected Health Information (PHI) in the United States.
The scope of the Type 1 HIPAA attestation is all of the cloud services and US Data Centers