Is OneDrive HIPAA Compliant storage

Question

I am looking to see if OneDrive is HIPAA compliant. I need to store medical information, client names and data. Is there a way for OneDrive to be HIPAA compliant so I can use the MS 365 and Office products seamlessly with my documentation?

Answer 1

Yes, OneDrive can be used in a HIPAA-compliant manner. Microsoft offers a Business Associate Agreement (BAA) for its covered entity and business associate customers, which includes OneDrive for Business as part of the in-scope services. This means that if your organization enters into a BAA with Microsoft, you can store protected health information (PHI) in OneDrive while complying with HIPAA regulations.

However, it is important to note that while Microsoft provides the necessary compliance framework, your organization is responsible for ensuring that it uses the services in a manner that complies with HIPAA and other applicable laws. Therefore, you should consult with legal advisors to ensure that your specific use case meets all regulatory requirements.

---

References:

• Health Insurance Portability and Accountability Act (HIPAA) & Health Information Technology for Economic and Clinical Health (HITECH) Act
• Privacy, security, and compliance in Microsoft OneDrive

Answer 2

Hi @zvg,

Welcome to Microsoft Q&A and thank you for reaching out.

I would like to follow up on Q&A assist suggestion. As I checked, if you are looking to purchase a OneDrive only option, Microsoft offers OneDrive for Business Plan 1, priced at $5 USD per user/month. You can review the pricing for OneDrive for Business and other Microsoft 365 Business plans that include OneDrive on the official Microsoft website.

That said, please note that Microsoft is retiring standalone OneDrive for Business plans. Plan 1 will no longer be sold after May 31, 2026, renewals will stop after January 2027, and the plan will be fully retired by December 2029.

If you plan to use OneDrive for Business long‑term, I recommend considering a Microsoft 365 business plan instead. Please note that Business Basic includes only the web apps, while Business Standard includes the full desktop applications.

Regarding what OneDrive for Business offers, could you confirm whether the version you’re currently using is the personal version? If so, OneDrive for Business is the managed, secure, business‑grade version of OneDrive that integrates with the rest of Microsoft 365 services, which supports HIPAA compliance standards.

I hope this helps.

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

How is OneDrive for Business different from what I currently have. What is the cost?