Protected health information (PHI) under HIPAA, is any information about an individual’s health status that identifies or relates to an individual’s past, present or future physical or mental health, the provision of health care to the individual, or the past, present or future payment for health care. Information is deemed to identify an individual if it includes either the individual’s name or any other information that could enable someone to determine the individual’s identity.

Identifiers include:

    • Name
    • Address (all geographic subdivisions smaller than state, including street address, city, county, ZIP code)
    • All elements (except years) of dates related to an individual (including birth date, admission date, discharge date, date of death and exact age if over 89)
    • Telephone numbers
    • FAX number
    • E-mail address
    • Social Security number
    • Medical record number
    • Health plan beneficiary number
    • Account number
    • Certificate/license number
    • Any vehicle or other device serial number
    • Device identifiers or serial numbers
    • Web URL
    • Internet Protocol (IP) address numbers
    • Finger or voice prints
    • Photographic images

See also: HIPAA

 Print Friendly