Protected Health Information (PHI)

How the laws define this

Both cited instruments establish that Protected Health Information encompasses any information concerning health status, healthcare provision, or healthcare payment linked to an individual under HIPAA. The primary divergence lies in how precisely the individual is identified and whether an explicit protection requirement is stated. The rule for Medicare Program; Contract Year 2024 Policy and Technical Changes to the Medicare Advantage Program, Medicare Prescription Drug Benefit Program, Medicare Cost Plan Program, and Programs of All-Inclusive Care for the Elderly covers data linkable to "an individual" and explicitly commands that PHI must be protected to ensure patient privacy and security under HIPAA. Conversely, the regulation for Hospitals, nursing homes, etc.; regulations, patient access to intelligent personal assistant specifies data linkable to a "specific individual," anchoring its meaning "as defined under HIPAA" without detailing a distinct mandate regarding privacy and security protections.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.