164.502(a)(5)(ii)(A)

paragraph (action item)

Except pursuant to and in compliance with § 164.508(a)(4), a covered entity or business associate may not sell protected health information.

164.502 Uses and disclosures of protected health information: General rules.

1 mapping across 1 framework

SCF1 mapping

PRI-03.3Prohibition of Selling, Processing and/or Sharing Personal Data (PD)

1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.