I'm building a service that provides a mobile and tablet app to input medical health record info, which can be stored locally and / or in a private, redundant virtual instance. I will be meeting with an attorney, but I wanted to see if anyone in the space has any IANAL experience / insight.
if you handle med info you need to comply with all regs. There are no exemptions. Thankfully, the regs are very straightforward. You should be able to comply no problem.