HIPAA regulations govern what can be shared and what cannot. Obviously, the information that is shared cannot contain patient-identifiable information. But what do you care? Are you getting U.S. prescriptions in Malaysia?
The the drug companies by this information so that they can figure out which doctors they need to visit and persuade to prescribe the new and "improved" drug(s).