I worked for a bank who had a team within its security org dedicated to dealing with fuckups caused by Indian outsourcers.

Depends on the contract your healthcare providers/payers/etc. have with those who do their IT.

Source: work on healthcare IT projects and can't let anyone outside of the US look at prod data no matter what due to the contract we have with our clients.