Protected Health Information (PHI)
What is Protected Health Information (PHI)?
Under HIPAA, any individually identifiable health information that is created, received, maintained, or transmitted by a covered entity or business associate. PHI includes medical records, billing information, and any health-related data linked to an individual.
Terms that appear alongside protected health information (phi)
Each of these is named in at least one of the same controls as protected health information (phi). The number is how many controls name both.
- hipaa 3 shared controls
- safe harbor 2 shared controls
- de identification 2 shared controls
- confidentiality 2 shared controls
Frameworks that govern protected health information (phi)
What the standards actually require on protected health information (phi)
Requirements naming protected health information (phi) across 3 standards, quoted from the control text.
HITECH Act statutory scope + structure. ENACTMENT: Title XIII of the American Recovery and Reinvestment Act of 2009 (ARRA, Public Law 111-5) signed 17 February 2009 + entered into force phased;
HITECH-Scope-ARRA-XIII-42USC-Ch156-Subtitles · HITECH Act Statutory Scope, ARRA Title XIII Origin and 42 USC Chapter 156 Structure (Subtitles A through D) →Protect Personally Identifiable Information (PII) and Protected Health Information (PHI) handled by Exchanges. Apply NIST 800-122 PII Confidentiality Impact Level determination + minimum necessary standard for use disclosure and request + HIPAA Privacy Rule 45...
MARS-E-Privacy-PII-PHI-Minimum-Necessary-HIPAA-Privacy-Rule-NIST-800-122-45-CFR-164-Subpart-E · MARS-E Privacy + PII + PHI + Minimum Necessary + HIPAA Privacy Rule + NIST 800-122 + 45 CFR 164 Subpart E →Disclose and operate protected health information (PHI) data handling + storage confidentiality + transmission confidentiality and integrity per MDS2 DATA + STCF + TXCF + TXIG sections.
MDS2-PHI-Data-Handling-DATA-Storage-STCF-Transmission-TXCF-TXIG-Encryption-FIPS · MDS2 PHI Handling + DATA + STCF Storage + TXCF Transmission + TXIG Integrity + Encryption + FIPS →Questions people ask about protected health information (phi)
What is Protected Health Information (PHI)?
Why is Protected Health Information (PHI) important for compliance?
Which compliance frameworks address Protected Health Information (PHI)?
Where can I learn more about Protected Health Information (PHI)?
See how Protected Health Information (PHI) applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.