“While the Health Insurance Portability and Accountability Act (HIPAA) generally applies to healthcare providers and related organizations, the act also imposes requirements on any institution that maintains health records on individuals, including schools. To meet those requirements when it comes to their cloud systems, a number of top universities have opted for Office 365, which Microsoft says can be HIPAA-compliant.”

 http://www.informationweek.com/hipaa-101-universities-use-office-365-to/240145874