Automated data backup to HIPAA-compliant institutional network share using robocopy

Protecting patient information is of utmost importance to a hospital, not only because of regulatory mandate, but also because it is the right thing to do. For this reason, consumer grade cloud storage (e.g. Dropbox, OneDrive etc.) is typically not allowed on a hospital network-connected device. Business solutions such as Office 365 SharePoint, OneDrive for Business etc. sometimes may only be authorized to store non-patient business files, depending on institutional policy.

In such cases, robocopy to the provisioned account-specific domain home on the intranet makes a lot of sense. I store the command line below in a .ps1 PowerShell script, and create a task in Task Scheduler to be run every midnight.

ROBOCOPY C:\Workspace \\INTRANET\UserHome\Backup\Workspace /DCOPY:DA /MT /MIR /FFT /Z /XA:SH /R:0 /TEE /XJD

This script only update new or updated files to the network share.