{
  "attribution": {
    "product": "NovaCopilot",
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/hipaa",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/hipaa)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "fingerprint": "ewai:eu:f8064a",
    "proof": "sha256:80c2fc525676df91f1e184c37f0bdbae306131d96a0598bf3941b595628c5398",
    "jurisdiction": "eu"
  },
  "cagi_brand": "CAGI – Corporate Artificial General Intelligence",
  "cagi_version": "1.0",
  "cagi_relation": "alternate-entry",
  "canonical_agent": "/us/agent/hipaa",
  "jurisdiction": "US Federal",
  "agent_type": "deterministic",
  "cagi_entry": "https://legal.exploreworldai.com/us/federal/cagi-api/hipaa",
  "canonical_agent_url": "https://legal.exploreworldai.com/us/agent/hipaa",
  "id": "hipaa",
  "identifier": "45 CFR Part 164, Subpart C",
  "matched": null,
  "verdict": "tillåtet",
  "audit": "UTANFÖR_TILLÄMPNING",
  "verdict_kind": "machine-classification",
  "outcome": {
    "code": "out-of-scope",
    "verdict": "tillåtet",
    "audit": "UTANFÖR_TILLÄMPNING",
    "title": "Regeln ger inget krav på den indata som lämnats",
    "titleEn": "The rule yields no requirement for the facts supplied",
    "obligation": "Ingen roll enligt 45 CFR 160.103 är angiven, eller så hanteras ingen elektronisk skyddad hälsoinformation.",
    "obligationEn": "No role under 45 CFR 160.103 is stated, or no electronic protected health information is handled.",
    "refs": []
  },
  "trace": [
    {
      "ruleId": "hipaa-breach",
      "matched": false,
      "checks": [
        {
          "expr": "elektronisk_phi = true",
          "value": false
        },
        {
          "expr": "incident_over_500 = true",
          "value": false
        }
      ]
    },
    {
      "ruleId": "hipaa-ba",
      "matched": false,
      "checks": [
        {
          "expr": "roll = business-associate",
          "value": false
        },
        {
          "expr": "elektronisk_phi = true",
          "value": false
        },
        {
          "expr": "ba_avtal = false",
          "value": false
        }
      ]
    },
    {
      "ruleId": "hipaa-risk",
      "matched": false,
      "checks": [
        {
          "expr": "någon(roll = covered-entity, roll = business-associate)",
          "value": false
        },
        {
          "expr": "elektronisk_phi = true",
          "value": false
        },
        {
          "expr": "riskanalys = false",
          "value": false
        }
      ]
    },
    {
      "ruleId": "hipaa-covered",
      "matched": false,
      "checks": [
        {
          "expr": "någon(roll = covered-entity, roll = business-associate)",
          "value": false
        },
        {
          "expr": "elektronisk_phi = true",
          "value": false
        }
      ]
    }
  ],
  "missing": [
    "ba_avtal",
    "elektronisk_phi",
    "incident_over_500",
    "riskanalys",
    "roll"
  ],
  "facts": {},
  "run_hash": "sha256:5df1e5c0edf5f1e231761d79222af9a9e19a4c14a571379234ec564fd6e73ac1",
  "coverage_score": 100,
  "change_impact_score": 5,
  "sources": [
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Administrative safeguards",
      "reference": "45 CFR 164.308",
      "scope": "Risk analysis, workforce access, training and incident procedures.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Physical safeguards",
      "reference": "45 CFR 164.310",
      "scope": "Facility access, workstation use and media handling.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Technical safeguards",
      "reference": "45 CFR 164.312",
      "scope": "Access control, audit controls, integrity and transmission security.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Business associate contracts",
      "reference": "45 CFR 164.314",
      "scope": "Written terms with every party that handles the data on your behalf.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    }
  ],
  "hashes": {
    "metadata": "sha256:ff17dece1116cedc135800258baf137414f07b9302edbbe38acafa6241829d0d",
    "text": "sha256:77c63575ec035069e0fc716cda9b0e09ba7ac88e40abc73bb050defb5c901031",
    "script": "sha256:adedad323acd212e4e613a1931e7c4dd696c9b89a5ac14f6a95c03cd5aad33d7",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:d4db7e5f4bb8b5cc958b4c4d1c050f3118c77363fb60e669d4f469a5a7977ae4"
  },
  "official_source": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "citation": "45 CFR Part 164, Subpart C, HIPAA, Skyddad hälsoinformation. NovaCopilot, https://legal.exploreworldai.com/us/agent/hipaa (hämtad 2026-08-15, bevis sha256:035c1dfa4597564c, bygge legal-2026-08-25).",
  "hash": "sha256:80c2fc525676df91f1e184c37f0bdbae306131d96a0598bf3941b595628c5398",
  "version": "legal-2026-08-25",
  "expires": "2026-09-24T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:80c2fc525676df91f1e184c37f0bdbae306131d96a0598bf3941b595628c5398",
    "revalidate_after": "2026-09-23T01:41:08.376Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/us/agent/hipaa",
  "usageInfo": "https://legal.exploreworldai.com/citering"
}