I have been trying to find a definition of what falls under the Protected Health Information (PHI) heading, but I have not found anything official. I know ss#'s, and such would qualify, but can someone point me to a definitive source?
thanks
45 CFR 160.103
(1) Protected health information means individually identifiable health information Except as provided in paragraph (2) of this definition, that is
(i) Transmitted by electronic media;
(ii) Maintained by electronic media; or
(iii) Transmitted or maintained in any other form or medium.
(2) Protected health information excludes individually identifiable health information in:
(i) Education records covered by the Family Educational Rights and Privacy Act, as amended, 20 U.S.C. 1232g;
(ii) Records described at 20 U.S.C. 1232g(a)(4)(B)(iv); and
(iii) Employment records held by a covered entity in its role as employer.
45 CFR 160.103
Protected health information means individually identifiable health information.
(1) Except as provided in paragraph (2) of this definition, that is:
(i) Transmitted by electronic media;
(ii) Maintained by electronic media; or
(iii) Transmitted or maintained in any other form or medium.
(2) Protected health information excludes individually identifiable health information in:
(i) Education records covered by the Family Educational Rights and Privacy Act, as amended, 20 U.S.C. 1232g;
(ii) Records described at 20 U.S.C. 1232g(a)(4)(B)(iv); and
(iii) Employment records held by a covered entity in its role as employer.
Not sure what your purpose/intent behind this question is, but this site might help.
I just went through mandatory HIPAA training. Whee! Basically, it’s any information that someone could use to identify a person. This includes name, gender, any part of the address, age, the medical tests they have ordered, test results, etc, etc.