Re: You're stuff is going in the cloud regardless of this.
Hospitals are frequently using free services e.g. dropbox for stuff already and yes that includes PII on occasion (sometimes encrypted files, sometimes not).
And their local rules will tell them not too unless encrypted. My employer is a university and even we have that.
Biting the hand that feeds IT
