iCloud has not stated that it is HIPAA compliant because Apple won’t sign a Business Associate Agreement (BAA).
iCloud provides cloud-based storage solutions, with security protections for both data storage and transfer. Authentication controls and access management are necessary for cloud services to be HIPAA-compliant. A healthcare provider must be able to monitor who accessed the data and what the user does with the information. iCloud’s controls meet the minimum HIPAA requirements.
When healthcare providers use cloud services with patient health information (PHI), business associates must sign a BAA.
