Around BIDMC
Calendar
Honors
In the News
Valuing Our Volunteers
BIDMCtoday Home
HIPAA
Countdown
Q. HIPAA’s
Privacy Rule says that “protected health information” (PHI)
must be disposed of properly (e.g., by shredding). What information
qualifies as PHI?
A. Protected health information is any oral, written or electronic
information:
-
That a health care provider or employee creates or receives; and
-
That relates to an individual’s past, present, or future physical or mental health, receipt of health care, or payment for health care.
This broad definition includes, but is not limited
to, medical records, registration data, insurance forms, clinic sign-up
sheets, prescriptions, X-ray films, IV bag labels and e-mails. For example,
if a doctor’s assistant writes down that “Mrs. X called to
ask about her lab results,” that note is “protected health
information,” since it identifies Mrs. X and relates to her health.
More information on HIPAA: www.hipaadvisory.com/regs/