|
| 1 | +--- |
| 2 | +title: How to create a compliant volume to host healthcare data |
| 3 | +description: This page details the steps to follow to create a compliant Scaleway Block Storage volume to host healthcare data |
| 4 | +tags: |
| 5 | +dates: |
| 6 | + validation: 2025-11-12 |
| 7 | + posted: 2025-11-12 |
| 8 | +--- |
| 9 | +import Requirements from '@macros/iam/requirements.mdx' |
| 10 | + |
| 11 | +When hosting healthcare data using Scaleway Block Storage, you must follow the recommendations outlined in the [shared responsibility model](/block-storage/reference-content/storage-shared-responsibility-model/) to ensure compliance with legal and regulatory requirements, such as data protection laws, and industry standards. |
| 12 | + |
| 13 | +Adhering to these guidelines helps safeguard sensitive information against unauthorized access, breaches, and data loss, while also clarifying the roles and responsibilities between the cloud provider and the customer. |
| 14 | + |
| 15 | +This documentation provides the following elements: |
| 16 | + |
| 17 | +- A procedure to create a compliant volume |
| 18 | +- Information on prohibited actions |
| 19 | +- Compliant encryption methods |
| 20 | +- Compliant deletion methods |
| 21 | +- A checklist to ensure you are ready to safely store healthcare data |
| 22 | + |
| 23 | +<Requirements /> |
| 24 | + |
| 25 | +- A Scaleway account logged into the [console](https://console.scaleway.com) |
| 26 | +- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization |
| 27 | +- Signed an HDS contract with Scaleway for the garantees outlined in the [shared responsibility model]() to apply |
| 28 | + |
| 29 | +## How to create a compliant volume |
| 30 | + |
| 31 | +Even though you can use an existing volume to host healthcare data, we strongly recommend you create a dedicated volume for this purpose. |
| 32 | + |
| 33 | +1. |
| 34 | + |
| 35 | +## Prohibited actions on a compliant volume |
| 36 | + |
| 37 | +to host healthcare data, you must comply to the following requirements: |
| 38 | + |
| 39 | + |
| 40 | + |
| 41 | +<Message type="important"> |
| 42 | +Failure to comply with these requirements may lead to voiding compliance on the objects contained in the bucket. |
| 43 | +</Message> |
| 44 | + |
| 45 | +## How to encrypt data |
| 46 | + |
| 47 | + |
| 48 | + |
| 49 | +## How to delete objects |
| 50 | + |
| 51 | +data must be deleted in a compliant way to make sure data can not be retrieved by any means immediately afterward. When using the HDS-compliant method (using the `PutBucketEncryption` action), Scaleway encrypts your uploaded objects with a dedicated key that will be instantly deleted upon receiving a deletion request for the targeted objects. |
| 52 | + |
| 53 | +This mechanism guarantees your objects can not be immediately retrieved, even if it takes additionnal time to process the delete of all the remaining chunks of your deleted objects. |
| 54 | + |
| 55 | +## Compliant bucket creation checklist |
| 56 | + |
| 57 | +Make sure that your bucket follows the requirements below: |
| 58 | + |
| 59 | +1. Make sure you [created your volume](#how-to-create-a-compliant-volume) in the **France - Paris** (`fr-par`) region. |
| 60 | + |
| 61 | + |
| 62 | + |
| 63 | +7. Follow the provided security best practices at all times. |
| 64 | + |
| 65 | +Refer to the [Block Storage Shared Responsibility Model](/block-storage/reference-content/storage-shared-responsibility-model/)) for comprehensive information on the legal framework to host healthcare data. |
0 commit comments