Personal health information (PHI) is any information a healthcare professional gathers to identify a patient and determine the most appropriate course of treatment, including demographic data, medical histories, test results, psychological conditions, insurance information, and other data.
HIPAA is the primary law governing the use, access, and disclosure of PHI in the U.S. Under the law, PHI is defined as information about an individual’s past, current, or future health and how that individual paid or was treated for their healthcare.
PHI describes a patient’s medical history, such as symptoms, different treatments, and outcomes, whether in an electronic health record (EHR) system or a paper-based record.
Organizations dealing with PHI are subject to HIPAA regulations regarding the creation, collection, transmission, maintenance, and storage of this data.