Answer
PHI is individually identifiable health information held or transmitted by a covered entity or business associate in a form or medium covered by HIPAA. Coverage depends on the information, identifiability, and organization or service involved.
References
- 45 CFR 160.103 Electronic Code of Federal Regulations