{
  "node_id": "us-hipaa-45-cfr-164-502-uses-disclosures-phi",
  "title": "45 CFR 164.502 -- Uses and disclosures of protected health information: General rules.",
  "domain": "Medical & Healthcare",
  "version": "1.0.0",
  "last_updated": "2026-05-06",
  "bluf": "This regulation establishes the general principle that a covered entity or business associate may not use or disclose protected health information (PHI) except as explicitly permitted or required by law, and mandates applying the 'minimum necessary' standard to such uses and disclosures.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "gdpr-article-5-data-principles",
    "gdpr-article-30-records-processing"
  ],
  "primary_citations_count": 7
}