PHI Examples
Which of the Following Are Examples of PHI?
A medical receptionist forwards a patient's appointment reminder to her personal email so she can "finish up at home." That email
Tag
HIPAA Identifiers
A collection of 10 posts
HIPAA Identifiers
HIPAA Identifiers: The 18 Data Points That Trigger Compliance
A Receptionist, a Spreadsheet, and 18 Data Points Nobody Counted A few years ago, I consulted for a mid-size clinic that had emailed a spreadsheet
PHI
Is MRN PHI? Yes — And Here's Why It Matters
A Single Number That Cost a Health System $2.4 Million In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted USB
HIPAA Identifiers
HIPAA Identifier Explained: The 18 Data Points That Matter
A Spreadsheet, a Social Security Number, and a $1.5 Million Settlement In 2018, Anthem Inc. paid $16 million to the Office for Civil Rights
PHI
What Is Considered PHI Under HIPAA? A Field Guide
A hospital receptionist emails a patient's lab results to the wrong address. A dental office posts a before-and-after photo on Instagram — with the
PHI
Is Phone Number PHI? What HIPAA Actually Says
A Single Phone Number Cost This Health Plan $6.85 Million In 2018, Premera Blue Cross agreed to pay $6.85 million to the Office
PHI
What's Considered PHI Under HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after an impermissible disclosure involving patient appointment data — information the practice didn't
HIPAA Privacy Rule
Which Is Not Considered an Identifier Under the Privacy Rule
In 2023, OCR settled with a healthcare analytics company for over $1.5 million after the organization shared datasets it believed were de-identified — but which
HIPAA Identifiers
HIPAA Identifier Rules: The 18 PHI Identifiers Explained
In 2023, a mid-sized health plan paid $1.3 million to settle with OCR after a breach investigation revealed that staff had been sharing spreadsheets
HIPAA Identifiers
HIPAA Identifiers PHI: The 18 Data Elements You Must Protect
In 2023, OCR settled with a health system for $1.3 million after an investigation revealed that employee spreadsheets containing patient names, dates of birth,