Yes, organizations can store ePHI in the cloud if they have a Business Associate Agreement in place. However, the organization needs to follow the same HIPAA security requirements for safeguarding ePHI that they would have followed to secure the ePHI on-premises.