Glossary · Regulation

PHI

Protected health information (HIPAA)

Updated

PHI is individually identifiable health information held or transmitted by a HIPAA covered entity or business associate, in any form, that relates to a person's health, care or payment for care.

Data stops being PHI once it is de-identified by Safe Harbor or Expert Determination; the same information held by a consumer app outside HIPAA is not PHI, although other laws may still protect it.

Official source

HHS: Summary of the HIPAA Privacy Rule

See also

Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →