In the event your application calls for your buyers to enter their information on their particular units, Then you definately qualify for SAQ A. To make certain that this laws is used consistently, nationwide and European facts protection authorities and bodies are founded. Apply protected configuration to all system parts. https://www.nathanlabsadvisory.com/blog/nathan/hipaa-compliance-checklist-ensuring-data-security-in-healthcare/