Personalized Facts processing might be carried out by people today, or by private or public organisations, like organizations or community authorities. Their duties and liability for distinct data processing rely upon the job which they play from the processing in issue. Your company is service provider dependent exterior the EU. https://www.nathanlabsadvisory.com/hipaa-hitech-compliance.html