A subset of individually identifiable health information that is held or maintained by covered entities or their business associates acting for the covered entity and protected under the HIPAA Privacy Rule.
Information that relates to:
– an individual’s physical or mental health or condition,
– the provision of health care to the individual, or
– the payment for the provision of health care to the individual,
and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.
Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number).
– HHS