Start Free Trial
Home/Regulations/HIPAA (Pharmacy PHI) — Regulatory Reference
Regulatory Reference
Pharmacy Federal (US) critical

HIPAA (Pharmacy PHI) — Regulatory Reference

Prescription records as PHI — critical sensitivity floor; access controls and vendor oversight enforced at the data layer.

Key Provisions
  • Prescription records are PHI under §160.103
  • §164.512(b) — public health activity exceptions
  • Marketing restrictions under §164.508(a)(3)
  • Business Associate obligations for pharmacy benefit managers
How AutoPIL Enforces It
  • Prescription PHI classified at CRITICAL sensitivity
  • Marketing-use restrictions encoded as policy YAML
  • Audit chain supports accounting of disclosures
Policy EngineAudit LogSensitivity LabelsAgent RegistryKey ScopingCatalog
AutoPIL Policy IDs
PHM-HIPAA-RX-001Prescription PHI Sensitivity
PHM-HIPAA-MKT-001Marketing Use Boundary
Official Sources

This page is a working reference and not a substitute for qualified legal review. Verify against official sources before use in compliance artifacts.

AutoPIL Governance Platform

Enforce this regulation today

AutoPIL intercepts every AI agent data access call, enforces your policy, and writes a tamper-evident audit record — before sensitive data enters the agent context window.

Start Free Trial View All Industries