Private AI for pharmacists: prescriptions, PDMP reports, and what HIPAA allows
The Morse teamPublished 10 min read
Private AI for pharmacists comes down to one rule as of November 2026: a prescription, a PDMP report, or a patient's question goes only into a tool your pharmacy has a business associate agreement (BAA) for, and no consumer ChatGPT or Claude plan comes with one, the one exception being OpenAI's free ChatGPT for Clinicians, which pharmacists can join and which has a BAA you sign in the app. Pharmacists can use ChatGPT for everything that leaves the patient out. OpenAI's help page lets you sign that BAA only if you are "authorized to sign a BAA for your account," and for a staff pharmacist that authority usually belongs to the employer.
This isn't legal or medical advice. It's about who can read what you type, not about doses or therapy. On November 5, 2026 we read HHS's pages on covered entities, business associates, minimum necessary, and de-identification; the DEA's prescription rule and the Medicaid drug review rule on the government's eCFR site; California's CURES page and Wisconsin's PDMP rule; a draft AI rule in the New Hampshire Board of Pharmacy's meeting materials; ASHP's AI resource center; and OpenAI's and Anthropic's own BAA pages. OpenAI earns credit here. Pharmacists were on its clinician list from launch, and its help pages name the features its BAA leaves out.
Can pharmacists use ChatGPT?
Yes, for any question with no patient in it. "What does a sig of 1 tab PO QHS PRN mean in plain English?" or "Draft a handout on how to use an inhaler spacer" carries no health information about anyone. A personal ChatGPT account still keeps those chats on OpenAI's servers and, unless you switch it off, uses them for training, as we cover in does ChatGPT train on your data.
The clinician version changes the patient side. As of November 5, 2026, ChatGPT for Clinicians "is free for verified clinicians in the United States," and eligible clinicians "currently include physicians (MD/DO), nurse practitioners (NP), physician assistants (PA), and pharmacists" (OpenAI). OpenAI says content in it "is not used to train OpenAI's models," and individual clinicians can sign a BAA "under Settings > Agreements." The same page warns, "Do not share PHI in ChatGPT for Clinicians unless a BAA is in place and you are authorized to sign a BAA for your account."
Its drug lookups come with their own warning. ChatGPT for Clinicians can connect to DailyMed, RxNorm, openFDA, and other public sources through a Healthcare Public Data plugin, and OpenAI tells users, "Do not include patient names, medical record numbers, or other protected health information in queries sent to public healthcare sources" (OpenAI). The Epic plugin that reads patient charts "is not available with ChatGPT for Clinicians" (OpenAI).
Who signs the BAA when you work for a pharmacy?
Usually the pharmacy, not you. HHS lists pharmacies among covered health care providers, "but only if they transmit any information in an electronic form in connection with a transaction for which HHS has adopted a standard" (HHS), which an electronic claim to a plan does. HHS defines business associates as persons "other than a workforce member of a covered entity" who handle health information on its behalf (HHS). A staff pharmacist at a chain, a hospital, or a mail-order operation is part of that workforce, and the BAA is the pharmacy's assurance from its vendor.
So the free clinician BAA fits best when you can sign for the pharmacy, such as an owner of an independent store. If you can't, ask your pharmacist-in-charge or privacy officer which AI tools your employer has agreements for. OpenAI's other options are organizational. Its BAA page says Enterprise and Edu accounts arrange one through sales, and "We do not offer a BAA for ChatGPT Business" (OpenAI). Anthropic's BAA covers its API and HIPAA-ready Enterprise plans, an Enterprise organization's Primary Owner has to switch it on, and it "only covers the single organization that accepted it" (Anthropic).
A signed BAA still leaves work to do. OpenAI says accepting a BAA and turning on its HIPAA support "do not, by themselves, make your application HIPAA compliant," and its list of covered features says improved memory "is not covered under your BAA. PHI should not be entered when using this feature" (OpenAI). HIPAA's minimum necessary standard also follows the data into an approved tool. HHS says covered entities must take "reasonable steps to limit the use or disclosure of, and requests for, protected health information to the minimum necessary to accomplish the intended purpose" (HHS). To ask whether a sig makes sense, the drug and the sig are usually enough.
Can you paste a PDMP report into an AI?
Not into a chatbot your pharmacy hasn't approved. A PDMP report adds state law on top of HIPAA, and a BAA with a chatbot company doesn't settle the state side. California's Department of Justice says a patient's dispensation history "that is received by a practitioner or pharmacist from CURES is subject to the Confidentiality of Medical Information Act and the Health Insurance Portability and Accountability Act," and that pharmacists "may access information in CURES only for patients under their care" (California DOJ). Wisconsin's rule says a person who discloses PDMP data or reports in violation of patient privacy laws "may be referred to the appropriate licensing or regulatory board for discipline, or the appropriate law enforcement agency for investigation and possible prosecution" (Wisconsin CSB 4.13).
Controlled substances raise a second issue. Under the DEA's rule, responsibility for proper prescribing and dispensing sits with the prescriber, "but a corresponding responsibility rests with the pharmacist who fills the prescription" (eCFR, 21 CFR 1306.04). An AI's opinion on a red flag doesn't shift any of that duty, and the PDMP history behind your judgment stays in the PDMP and your pharmacy system.
What can you paste from each pharmacy record?
Only what's left once the patient is out, and HIPAA's de-identification rules reach further into a pharmacy record than the name. The Safe Harbor method lists 18 identifiers, and HHS's guidance applies them to details pharmacies handle every day (HHS). HHS says a data set with "patient initials, or the last four digits of a Social Security number" doesn't meet Safe Harbor, so initials don't hide a patient. A fill date is a date of service, and Safe Harbor allows only the year. An Rx number falls under "any other unique identifying number," and HHS says electronic prescribing systems "assign and embed barcodes into patient records and their medications" that are unique to each patient. Ages over 89 have to be reported as 90 or older.
The Medicaid drug review rule shows why a DUR note never travels alone. For Medicaid patients, states must have pharmacists make "a reasonable effort to obtain, record, and maintain patient profiles" with the patient's "Name, address, telephone number, date of birth (or age), and gender," the history, and "Pharmacist's comments relevant to the individual's drug therapy" (eCFR, 42 CFR 456.705). Four Safe Harbor identifiers sit in the same record as your note.
Here is the pharmacy's data, read against those rules on November 5, 2026.
| Pharmacy data | Rule that covers it | Fine for a chatbot with no BAA | Only in a tool your pharmacy approved |
|---|---|---|---|
| Prescription record | HIPAA; Safe Harbor counts the Rx number, the fill date, and the patient's name and address | The drug, strength, and sig on their own: "What does this sig mean?" | The record itself, with the patient attached |
| PDMP lookup | State PDMP law plus HIPAA; CURES limits access to "patients under their care" | Nothing from the report; ask how to read a PDMP report in general | Only where your state's PDMP terms and your pharmacy's policy allow it, since a BAA covers HIPAA, not state PDMP law |
| DUR note | HIPAA; Medicaid profile rule puts name, address, phone, birth date, and gender beside it | The interaction or duplication question, with no patient attached | The note and the profile |
| Patient counseling question | HIPAA once it's tied to a patient; your state's counseling standards | The question in general terms: "Explain a spacer to someone using an inhaler for the first time" | Anything that names the patient or their other medications |
| Compounding formula | A master formula names no patient; a compounding record for a prescription is PHI, since FDA describes compounding as tailored "to the needs of an individual patient" | A general technique question, not your pharmacy's own formula | Patient-specific compounding records; a proprietary formula only if your employer allows it |
| Inventory and PBM contract terms | Not PHI; your contract's confidentiality terms and your employer's policy | What a clause type usually means, with no rates or names | Contract text, rates, and supplier pricing, if your employer allows AI for it at all |
FDA's description of compounding comes from its compounding page (FDA). HHS lists "Pharmacy benefits manager that manages a health plan's pharmacist network" as a business associate example, which governs the patient data a PBM handles, not the secrecy of the terms it offers you. A patient asking about their own prescriptions is in a different spot, which we cover in private AI for health questions.
What do boards of pharmacy and ASHP say about AI?
Mostly that you stay accountable, and the most detailed rule we found is a proposal. New Hampshire's Board of Pharmacy has a draft Part Ph 522, "Technology-Assisted Pharmacy Practice," in its meeting materials, which we read on November 5, 2026 (New Hampshire Board of Pharmacy). It says technology "shall not replace the professional judgment, responsibility, or accountability of licensed pharmacy personnel," and that AI tools "shall not be used as the sole basis to" verify a prescription or dispense a drug. A pharmacist would stay responsible for "prospective drug utilization review, patient counseling, clinical assessment," and final verification. A pharmacy using an outside AI vendor would have to make sure it "can support the pharmacy's obligations relating to patient confidentiality, auditability, record retention, security."
The same document reprints the code of ethics New Hampshire has had in effect since August 2024, which already asks each pharmacist to "Respect the confidential and personal nature of professional records, and disclose such information only as allowed by state or federal law."
ASHP published an expanded statement on AI in pharmacy in the American Journal of Health-System Pharmacy in September 2025, but its full text sits behind the journal's paywall and we couldn't read it on November 5, 2026, so we don't quote it. ASHP's own AI resource center still links the 2020 statement that day (ASHP). We found no model rule on AI from the National Association of Boards of Pharmacy. Your own board's newsletter and your employer's policy are the places to check next. For the nursing side of the same counter, see can nurses use ChatGPT.
How Morse keeps a pharmacist's questions private
Every chatbot account in this article keeps your questions on the company's servers, under your name and email, and signing up for the clinician version takes your NPI and a license check too. Even your patient-free questions build a record of what you asked and when. Morse is designed so your chat history stays in your browser instead of on our servers.
Prescriptions, PDMP reports, DUR notes, and anything else that names a patient stay in your pharmacy's approved systems. Morse doesn't claim HIPAA compliance or any certification. It's for the rest of a pharmacist's AI use, such as drug information questions, de-identified cases, CE and board exam study, and drafts.
- E2EE, for a de-identified case or a policy draft that no company should read. Before the message leaves your device, your browser verifies the enclave's hardware attestation, then seals the message for that enclave alone. Morse's servers pass along ciphertext they can't read, and only your browser decrypts the reply. The enclaves are run by third-party providers, not by Morse, and the guarantee rests on the enclave hardware and attestation working as designed. E2EE models can't search the web, so ask questions that need a current label in Private mode.
- Private, for drug information, study questions, and plain-language counseling handouts. New chats start in Private, on open-weight models like DeepSeek, Kimi, and GLM, plus xAI's Grok. Morse has zero data retention agreements with its inference, search, and other providers, so they keep nothing. Where a provider confirms zero retention on each reply, Morse checks it and refuses a reply that doesn't.
- Anonymous, to put a general question to GPT, Claude, or Gemini without the provider knowing it's you. Our proxy strips your account, email, and IP address and sends the message under Morse's own account. The provider still sees the text and may keep it for a limited time to check for abuse, under its own policy, so the Safe Harbor habits above matter most here.
Whatever the mode, your chat history lives in your browser, encrypted, and not on Morse's servers. It takes two keys to open, one kept on your device and one our server hands you at sign-in. Morse doesn't train AI on what you type, sell your data, or show ads. A package insert you attach goes with the message and is never stored by Morse, and a Temporary chat lives in memory only, which suits a handout you'll copy into your own system and close. Because we don't store chats, we usually have very little to give authorities. Clearing your browser, losing the device, or deleting your account deletes the chats, and Morse can't recover them, so copy anything you need into your own notes.
Ask your first drug information question from the Morse home page without an account, or start free with no card. E2EE chats come with Pro, at $19 a month.
Common questions
Can pharmacy technicians sign up for ChatGPT for Clinicians?
Not as of November 5, 2026. OpenAI lists physicians, nurse practitioners, physician assistants, and pharmacists as the eligible clinicians, and sign-up needs an NPI and a license its verification provider can check.
Do I have to take the prescriber's name out before asking an AI?
HHS says Safe Harbor has "no explicit requirement to remove the names of providers," only the patient's and those of their relatives, employers, and household members. A prescriber's name next to an unusual drug in a small town can still point to one patient, so leave it out when the question works without it.
Can I upload a package insert or a drug label to a chatbot?
A published label names no patient, so patient privacy rules don't come into it. A consumer chatbot still keeps the file and the chat under your account, so the questions you ask about it are on record.
Is Morse HIPAA compliant?
Morse doesn't claim HIPAA compliance or any certification, so treat it like any tool your pharmacy hasn't signed a BAA for and keep patient information out. It's built for the rest: drug information questions, study, and de-identified drafts, with history kept in your browser.