Depends on the contract your healthcare providers/payers/etc. have with those who do their IT.

Source: work on healthcare IT projects and can't let anyone outside of the US look at prod data no matter what due to the contract we have with our clients.