OCI demonstrates its alignment with 2G3M Framework in Japan’s medical industry

We’re pleased to announce that Oracle Cloud Infrastructure (OCI) has completed a self-assessment, validated by the Mitsubishi Research Institute (MRI), an independent third party, to demonstrate its adherence to Japan’s 2G3M standard. This self-assessment helps to demonstrate that OCI’s security controls and business practices meet the 2G3M requirements for safeguarding sensitive medical applications and data.

The 2G3M framework is comprised of two guidelines (2G) by three Japanese ministries (3M) and defines important standards of operation and compliance for cloud services used by the medical industry.

The Japanese government established the 2G3M framework for cloud services

The 2G3M framework consists of the following guidelines:

• The Safety Management Guideline for Information Systems and Service Providers Handling Medical Information

• The Guideline for Safety Management of Medical Information Systems Version 5.2

Together, these guidelines define compliance requirements for providers of systems containing digitized medical personal identifiable information (PII) and users of systems that handle medical PII, such as hospitals, pharmacies, emergency, non-emergency care providers, and medical information networks. These guidelines were established by three ministries: The Ministry of Economy, Trade and Industry (METI), the Ministry of Internal Affairs and Communications (MIC) and the Ministry of Health, Labor & Welfare (MHLW). The guidelines ensure that medical institutions maintain a high standard for the secure handling of sensitive health data.

The 2G3M framework drives to preserve and protect medical data and increase efforts for disaster countermeasures and secure data handling and storage practices.

OCI’s commitment to security and compliance

OCI is built for healthcare workloads and offers the security, availability, and compliance critical to the care of patients and delivery of value to medical organizations worldwide. With two Oracle Cloud data regions in Japan, OCI offers the availability, scalability, and performance that are critical to the innovation and optimization of medical institutions’ cloud applications and workloads.

To learn more about Oracle compliance programs, see Oracle Cloud Compliance. If you have other questions about using Oracle Cloud Infrastructure, contact one of our representatives for more information.