Cloud storage providers, such as SpiderOak, that support Covered Entities through the storage of PHI are Business Associates.</p> <p>The latest update to HIPAA requires, among others, healthcare providers, medical institutions, and cloud storage services supporting those entities where PHI is involved to be compliant with HIPAA rules and regulations.