Definition
Protected Health Information or PHI refers to any individually identifiable health data held by a covered entity. This includes a wide range of personal details like medical records, billing information, and demographic data that can be linked to a specific person's health status or treatment. PHI is handled with strict privacy and security protocols to prevent unauthorized access or disclosure. Understanding PHI is crucial for maintaining patient confidentiality and complying with regulations like HIPAA. For instance, a patient's name combined with their diagnosis constitutes PHI. It is distinct from general personally identifiable information (PII) because PHI specifically relates to health. This concept is frequently tested on security certifications such as CompTIA Security+ and CySA+, as well as the CISSP exam.