PHI stands for what in the HIPAA context?

• A. Personal Health Information
• B. Protected Health Information
• C. Patient Health Information
• D. Public Health Information

Answer: (B)

In HIPAA, PHI stands for Protected Health Information—the health information that is protected by the Privacy Rule. This means any individually identifiable health information that a covered entity or business associate creates, receives, maintains, or transmits, in any form (electronic, paper, or oral). PHI covers information about an individual’s health status, the provision of health care, or payment for health care when that information can be linked to the individual. Examples include a patient’s medical records, lab results, or billing information that includes identifiers like name or social security number. The other terms listed aren’t the HIPAA term used: “Personal Health Information” isn’t the standard designation, “Patient Health Information” isn’t the formal label, and “Public Health Information” is not the protected category under HIPAA.