---
title: "Compare a clinic tool's terms with the privacy limits"
url: "https://ailawframework.com/practice/health-and-medical-law/review-a-practice-ai-tool-against-ahpra-expectations/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-B8-3-US"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# Compare a clinic tool's terms with the privacy limits

> Quote the vendor's clauses on what information is collected, who can see it, and whether the vendor trains on it. Do not approve the tool.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/review-a-practice-ai-tool-against-ahpra-expectations/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Quote the vendor's clauses on what information is collected, who can see it, and whether the vendor trains on it. Do not approve the tool. |
| What the lawyer must review | You decide whether the tool may be used. Section 164.502 provides that a covered entity or business associate may not use or disclose protected health information except as that subpart, or subpart C of part 160, permits or requires. The opened permitted uses include disclosure to the individual and, as § 164.506 allows, treatment, payment, or health care operations. Section 164.506 was not opened, so do not list its conditions. Formal Opinion 512 requires informed consent before information relating to a representation goes into a self-learning tool. No professional-board advertising or device rule was opened. |
| Written for | United States |
| Applies to | [Review a practice AI tool against Ahpra expectations](https://ailawframework.com/practice/health-and-medical-law/review-a-practice-ai-tool-against-ahpra-expectations.md) |

## Checking plan

- What the AI does: Quote the vendor's clauses on what information is collected, who can see it, and whether the vendor trains on it. Do not approve the tool.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- Do not recite the terms of a business-associate contract. Section 164.504(e) was not opened.
- A board's expectations in another country are not this check.

## Sources

- [45 CFR § 164.502 (uses and disclosures of protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked 2026-10-22)
- [ABA Formal Opinion 512, Generative Artificial Intelligence Tools (29 July 2024)](https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf) (checked 2026-10-22)
- [ABA Model Rule 1.6, Confidentiality of Information](https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*