Protected health information is known as PHI. Protected health information (PHI) is "any information in the medical record or designated record set that can be used to identify an individual and that was created, used, or disclosed in the course of providing a health care service such as diagnosis or treatment."4
PHI is information that relates to:
- An individual's past, present, or future physical or mental health or condition
- The provision of health care to the individual
- The past, present, or future payment for the provision of health care to the individual
PHI includes demographic data (more about this in the De-identification section). Some examples include:
- Name
- Phone numbers
- Addresses
- Electronic mail addresses
- Social security numbers
- Medical record numbers
- Health plan beneficiary numbers
All identifiers that can be used to identify an individual are protected.
Note: Health information by itself (lab results, vital signs, or other health information) alone - without any patient demographic information - is not considered PHI.
