There are certification programs for HIPAA such as HITRUST. US centric though, other regions will have local requirements