I am currently researching hosting vendors & services in Europe that I can use to build up websites & related web based applications for healthcare. Eventually we would like the users to be able to enter some personal medical information into these sites, so there is a need to ensure data privacy & confidentiality. Our company is US based, so we also need to adhere to US legislation eg SAS 70 Type II.
Does anyone have any experience of reviewing hosting companies with regard to their data privacy certification? For example I know Rackspace & Verizon have centres in europe with SAS 70 Type II but I would like to find others.