Federal privacy law allows pharmacy benefit managers to hand over limited data about individual patients in certain circumstances, but Florida’s demand for extensive information on patients and doctors could violate that law, according to experts.