WHAT IS PHI?
PHI stands for
Protected Health Information. Here is the legal definition as taken from the Federal Registry:
Individually identifiable health information is information that is a subset of health information, including demographic information collected from an individual, and:
(1) Is created or received by a health care provider, health plan, employer, or health care clearinghouse.
(2) Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and
-
That identifies the individual; or
-
With respect to which there is a reasonable basis to believe the information can be used to identify the individual.
What this means is that
all information collected pertaining to an identifiable patient is considered to be PHI and is to be protected under Federal Guidelines as listed under the HIPAA laws. Here are a few examples of PHI:
-
Patient name, birth date, blood type and emergency contact
-
Patient demographics.
-
Insurance information which includes policy number, name of holder, employer
-
Dates of treatment and health maintenance visits
-
Dates and results of tests and screenings
-
All illnesses and surgeries, with dates
-
Medicines, dosages, and medical history
-
Any allergies and immunizations
-
Any history of illnesses in patient’s family
-
Past medical family and social histories.
-
Any hospitalizations or treatment in a rehabilitation facility
-
Genetic testing results of patient or patient’s history
HIPAA privacy and security are carefully monitored within the HealthTeam and all medical colleges. All Protected Health Information (PHI) shall be carefully managed and secured. Any individual that requires access to PHI is to sign a confidentiality agreement.
For further information or questions, please contact:
Mary-j Waterstraat
HIPAA Compliance and Privacy Officer
A130 East Fee Hall
355-1822
Mary-j.waterstraat@hc.msu.edu