Baylor – Keeping HIPAA Compliant in Office 365 Migration

The final challenge was to calculate the cost to keep all our data on-premises... Our estimate ran into multiple millions of dollars!"

Leading US College of Medicine Stays HIPAA and FERPA Compliant as It Migrates to Microsoft’s Cloud.

With three areas of focus – education, healthcare and research – the Baylor IT team is responsible for delivering an IT infrastructure that caters to students, patients, faculty and staff.

Customer
Baylor College of Medicine
Partner
US-Amplify
Source
Enterprise Vault
Target
Microsoft Office 365
Data Size
40TBs
Users
15,000
Product
Transvault Migrator

Migration Motivations

Bound by regulations including the Health Insurance Portability and Accountability Act (HIPAA) for patients and Family Educational Rights and Privacy Act (FERPA) regulations for students, designing and maintaining key systems such as messaging and email records storage is no easy undertaking.

Paul Crow, Manager of Enterprise Messaging and Collaborative Technologies for Baylor, explained the situation presented to his team prior to initiating an email migration project:

“We had been using an on-premises Microsoft Exchange system to provide an email service for our stakeholders. This was supported by safeguards including data loss prevention tools to avoid the transmission of inappropriate information, and also Veritas Enterprise Vault to provide secure email retention services. Due to storage limitations, we were only able to offer 3 years’ worth of archiving capability, and for research staff collaborating on long-term projects, this was unacceptable. Then there were issues with a poor-performing Outlook plugin that was making searching archived email very difficult for people. The final challenge for our email storage infrastructure was a calculation of what it would cost to keep all our data on-premises, given the sheer volume of email traffic. Our estimate ran into multiple millions of dollars!”

Baylor made the decision to migrate its systems to Microsoft’s Office 365 cloud service. This was prompted by a change in key management personnel, who adopted a policy of, in an ideal world, “Keep all emails forever”.

Crow elaborated on this decision, “The Office 365 platform ended the problems we’d been having with storage limitations. Being both HIPAA and FERPA compliant meant it was also a feasible solution to migrate our data. We only had to educate users regarding what would constitute protected email content.”

Baylor used TransVault Migrator for its archive migration, delivered along with services from one of TransVault’s top North American partners, US-Amplify.

While ensuring the required level of security and confidentiality, including complete chain-of-custody and accurate ownership mapping, TransVault Migrator moved the institution’s email data in record time.

Joseph Whitmore, US-Amplify’s Technical Lead for the project, upgraded TransVault Migrator in-situ during the project to get the benefit of TransVault’s newly released CloudStream ingestion technology. “The performance of the legacy email data transfer to Office 365 had been good before the software upgrade, but with this this new version of TransVault Migrator, we saw a huge leap forward in terms of throughout”, explained Whitmore.

“The project was now going so fast that, at points, USAmplify was waiting on us for input before it could move to the next phase”, added Crow. As illustration of this, the project was running at 3 million messages per week – after the CloudStream upgrade, this improved to 13 million messages per week.”

The two teams were extremely complimentary about their joint project. “Working with such a high caliber IT team at the customer’s site made the whole project flow a lot more easily”, commented Whitmore. In return, Crow said, “We were 110% satisfied with the project delivered by USAmplify, and the team worked well with us throughout the process. Plus, our end users – at worst – experienced two hours loss of access to their archives as they were being migrated, so they were happy too.”

Paul Crow, Manager of Enterprise Messaging and Collaborative Technologies for Baylor

Crow explained the situation presented to his team prior to initiating an email migration project:

“We had been using an on-premises Microsoft Exchange system to provide an email service for our stakeholders. This was supported by safeguards including data loss prevention tools to avoid the transmission of inappropriate information, and also Veritas Enterprise Vault to provide secure email retention services. Due to storage limitations, we were only able to offer 3 years’ worth of archiving capability, and for research staff collaborating on long-term projects, this was unacceptable. Then there were issues with a poor-performing Outlook plugin that was making searching archived email very difficult for people. The final challenge for our email storage infrastructure was a calculation of what it would cost to keep all our data on-premises, given the sheer volume of email traffic. Our estimate ran into multiple millions of dollars!”

Potential Migration Challenges

James Moody, partner manager at TransVault UK explained:

“Auto Trader’s project was very cost-sensitive due to savings targeted elsewhere in their overall migration project. They were however, understandably, demanding over which migration software they would use. Seeing the proposed solution in action was a stipulation before any deal could be agreed. Sprint’s evaluation mode allowed us to put their concerns by proving we could extract data from Enterprise Vault in a meaningful and efficient way.”

The partner consultant working on the project commented:

“They seemed really impressed with the new user-interface that Sprint brought to the table. It’s pretty slick-looking and strips away a lot of the complexity formerly associated with this sort of archive migration to the cloud. Despite being fairly new to the market, the product is back-ended by proven technology that I’ve used many times before in other projects. With this in mind, we could make exactly the same assurances as always with regards to data integrity and migration auditing.”

Do you have a migration project?

Get a quote today.

Request quote

Related case studies