Protected Health Information is made up of two components: Health Information and Individually Identifiable Health Information. Health Information is information that relates to the past, present, or future health of the individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care. Individually Identifiable Health Information is information is information that can be used to identify the individual, such as a name or social security number.
PHI is individually identifiable health information transmitted by electronic media, maintained in electronic media, or transmitted or maintained in any other form or medium. PHI excludes education records covered by the Family Educational Rights and Privacy Act, as amended, 20 U.S.C. 1232g, records described at 20 U.S.C. 1232g(a)(4)(B)(iv), and employment records held by a covered entity in its role as employer.
individually identifiable health information collected from an individual that is created or received by a healthcare provider, employer, or plan. Any information related to the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or the past, present, or future payment for the provision of healthcare to an individual. This may include but is not limited to: Patient's Name Patient's Social Security Number Phone Number or Address Medical History Current Medical Condition Test results and images