{
  "attribution": {
    "product": "NovaCopilot",
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/hipaa",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/hipaa)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "fingerprint": "ewai:eu:f8064a",
    "proof": "sha256:cb082c5e53740c8e7a0a1086c2050859338368853a93e22ac4ecd53ef1fb33b2",
    "jurisdiction": "eu"
  },
  "cagi_brand": "CAGI – Corporate Artificial General Intelligence",
  "cagi_version": "1.0",
  "cagi_relation": "alternate-entry",
  "canonical_agent": "/us/agent/hipaa",
  "jurisdiction": "US Federal",
  "agent_type": "deterministic",
  "cagi_entry": "https://legal.exploreworldai.com/us/federal/cagi-api/hipaa",
  "canonical_agent_url": "https://legal.exploreworldai.com/us/agent/hipaa",
  "id": "hipaa",
  "rule": "hipaa-security-rule",
  "identifier": "45 CFR Part 164, Subpart C",
  "jurisdiction_scope": [
    "federal"
  ],
  "risk_dimensions": [
    "privacy",
    "security",
    "operational"
  ],
  "tier": 1,
  "coverage_score": 100,
  "change_impact_score": 5,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "engine": {
    "version": "agent-engine-1",
    "hash": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0"
  },
  "spi": {
    "call": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/run",
    "method": "GET",
    "inputs": [
      {
        "name": "roll",
        "kind": "enum",
        "values": [
          "covered-entity",
          "business-associate",
          "ingen"
        ],
        "label": "Roll enligt regelverket",
        "labelEn": "Role under the rule"
      },
      {
        "name": "elektronisk_phi",
        "kind": "boolean",
        "label": "Hanterar elektronisk skyddad hälsoinformation",
        "labelEn": "Handles electronic protected health information"
      },
      {
        "name": "ba_avtal",
        "kind": "boolean",
        "label": "Skriftligt business associate-avtal finns",
        "labelEn": "A written business associate agreement is in place"
      },
      {
        "name": "riskanalys",
        "kind": "boolean",
        "label": "Dokumenterad riskanalys finns",
        "labelEn": "A documented risk analysis exists"
      },
      {
        "name": "incident_over_500",
        "kind": "boolean",
        "label": "Incident som rör minst 500 personer",
        "labelEn": "Breach affecting at least 500 individuals"
      }
    ],
    "output": [
      "verdict",
      "audit",
      "outcome",
      "trace",
      "missing",
      "facts",
      "hash"
    ],
    "errors": [
      {
        "code": 400,
        "meaning": "Okänt fält eller värde utanför de tillåtna"
      },
      {
        "code": 404,
        "meaning": "Agenten finns inte"
      },
      {
        "code": 429,
        "meaning": "Kvoten är förbrukad"
      }
    ],
    "quota": "60 anrop per minut och klient",
    "license": "https://legal.exploreworldai.com/citering",
    "stability": "Fält och utfallskoder ändras inte utan nytt bygge och ny hash"
  },
  "sources": [
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Administrative safeguards",
      "reference": "45 CFR 164.308",
      "scope": "Risk analysis, workforce access, training and incident procedures.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Physical safeguards",
      "reference": "45 CFR 164.310",
      "scope": "Facility access, workstation use and media handling.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Technical safeguards",
      "reference": "45 CFR 164.312",
      "scope": "Access control, audit controls, integrity and transmission security.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Business associate contracts",
      "reference": "45 CFR 164.314",
      "scope": "Written terms with every party that handles the data on your behalf.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    }
  ],
  "supervisors": [
    {
      "id": "hhs-ocr",
      "name": "U.S. Department of Health and Human Services, Office for Civil Rights",
      "shortName": "HHS OCR",
      "url": "https://www.hhs.gov/ocr/index.html"
    }
  ],
  "monitor": {
    "feed": "https://legal.exploreworldai.com/api/public/v1/changes/feed?layer=us",
    "diff": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/monitor.json",
    "freshness": "https://legal.exploreworldai.com/api/public/v1/freshness?layer=us",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify"
  },
  "artifacts": {
    "manifest": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/manifest.json",
    "script": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/script.json",
    "ai": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/ai.json",
    "run": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/run",
    "monitor": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/monitor.json",
    "sections": "https://legal.exploreworldai.com/api/public/v1/us-agents/hipaa/sections",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify"
  },
  "hashes": {
    "metadata": "sha256:ff17dece1116cedc135800258baf137414f07b9302edbbe38acafa6241829d0d",
    "text": "sha256:77c63575ec035069e0fc716cda9b0e09ba7ac88e40abc73bb050defb5c901031",
    "script": "sha256:adedad323acd212e4e613a1931e7c4dd696c9b89a5ac14f6a95c03cd5aad33d7",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:d4db7e5f4bb8b5cc958b4c4d1c050f3118c77363fb60e669d4f469a5a7977ae4"
  },
  "version": "legal-2026-08-25",
  "official_source": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C",
  "canonical": "https://legal.exploreworldai.com/us/agent/hipaa",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "citation": "45 CFR Part 164, Subpart C, HIPAA, Skyddad hälsoinformation. NovaCopilot, https://legal.exploreworldai.com/us/agent/hipaa (hämtad 2026-08-15, bevis sha256:035c1dfa4597564c, bygge legal-2026-08-25).",
  "hash": "sha256:cb082c5e53740c8e7a0a1086c2050859338368853a93e22ac4ecd53ef1fb33b2",
  "expires": "2026-09-24T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:cb082c5e53740c8e7a0a1086c2050859338368853a93e22ac4ecd53ef1fb33b2",
    "revalidate_after": "2026-09-23T02:23:51.426Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}