What does South Lake's HIPAA notice cover?

South Lake's HIPAA Notice of Privacy Practices covers how the pharmacy uses and discloses patient health information in its capacity as a covered entity. It states that the pharmacy is required by law to maintain privacy and security of PHI, will notify patients of breaches, and will not share information beyond what is described unless authorized in writing by the patient.

Does South Lake Compounding provide a clinic BAA?

South Lake does not publish a Business Associate Agreement template for clinic ordering relationships. Because submitting orders through LifeFile involves patient information, request a signed BAA before transmitting PHI and have your counsel review the terms.

How does Fizy Health handle HIPAA and BAAs?

Fizy Health signs a clinic BAA at onboarding, keeps patient records organization-scoped, and audits patient-linked cart actions per line. PHI access controls are built into the product rather than negotiated after signing.

South Lake Compounding HIPAA and BAA

South Lake Compounding HIPAA and BAA: what to confirm

South Lake Pharmacy is a covered entity under HIPAA — as a licensed pharmacy, it is directly bound by the Privacy Rule. It publishes a HIPAA Notice of Privacy Practices at slcompounding.com that outlines how patient information is used and disclosed. That notice is patient-facing, not a clinic-level Business Associate Agreement. Because ordering through the LifeFile portal passes patient information from your clinic to South Lake, your clinic likely needs a signed BAA with South Lake in its role as a business associate handling PHI on your behalf — and South Lake does not publish a BAA template on its site. The right step is to request a signed BAA in writing before you transmit any protected health information.

This page explains the difference between South Lake's HIPAA Notice of Privacy Practices and a clinic-level BAA, and what to confirm before your first order.

Compare Fizy Health vs South Lake Compounding

Proudly Partnered With

Why does a clinic need a BAA with a pharmacy?

South Lake Pharmacy is itself a HIPAA covered entity — as a licensed pharmacy it is directly subject to the Privacy, Security, and Breach Notification Rules. It publishes a HIPAA Notice of Privacy Practices that explains how it uses and shares patient health information in its capacity as a pharmacy. That notice fulfills a HIPAA obligation to patients. The BAA question is different: when your clinic shares PHI with South Lake through the LifeFile prescriber portal as part of an ordering workflow, South Lake is also functioning as a business associate of your clinic for that data. HIPAA generally requires a signed BAA in that relationship. South Lake does not publish a standard clinic BAA template on its site, so a clinic should request one, have counsel review it, and execute it before transmitting any PHI to the platform.

HIPAA verification checklist

What to confirm about South Lake Compounding and HIPAA

Each row is a HIPAA consideration, what is publicly known about South Lake Pharmacy, and the document or commitment to request before sharing PHI.

HIPAA consideration

What is publicly known

What to request

HIPAA Notice of Privacy Practices

What is publicly knownSouth Lake Pharmacy publishes a HIPAA Notice of Privacy Practices at slcompounding.com. The notice is patient-facing and covers how the pharmacy uses and discloses patient health information. It states patients can file complaints with HHS OCR.

What to requestReview the notice at slcompounding.com/hipaa-notice-of-privacy-practices/ and confirm it is current.

Clinic-level Business Associate Agreement

What is publicly knownSouth Lake does not publish a BAA template for clinic ordering relationships. A BAA may be required when a clinic shares PHI through LifeFile and South Lake handles it as a business associate.

What to requestRequest a signed BAA before transmitting any patient information through LifeFile. Have your counsel review it.

PHI access controls in LifeFile

What is publicly knownSouth Lake does not publish how access to patient data within the LifeFile portal is restricted by role or organization for clinic users.

What to requestAsk how prescriber and staff access to patient records is controlled in LifeFile and whether access is logged.

Data in transit and at rest

What is publicly knownSouth Lake does not publish encryption details for patient data transmitted through LifeFile or stored on their systems.

What to requestConfirm encryption in transit and at rest for patient data handled through the prescriber portal.

Breach notification obligations

What is publicly knownSouth Lake's HIPAA notice states it will notify patients promptly if a breach occurs that may have compromised the privacy or security of their information, consistent with HIPAA Breach Notification Rule requirements.

What to requestConfirm how and when your clinic would be notified of a breach affecting PHI you submitted through LifeFile.

Sourced from South Lake Pharmacy HIPAA Notice of Privacy Practices (slcompounding.com/hipaa-notice-of-privacy-practices/) and public website, reviewed June 2026. HIPAA terms should be confirmed in writing with South Lake and reviewed by your own counsel.

Navigate HIPAA terms through a sales conversation, or start with a BAA at onboarding?

South Lake Compounding fits if