What is PHI

Protected Health Information (PHI) is health information, including demographic data, created or received by a covered entity (such as any UNC Health entity hospital, clinic, department or workforce member of UNC Health or UNC SOM) which relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present or future payment for the provision of health care by an individual and that identifies or can be used to identify the individual.

HIPAA Identifiers

The following 18 HIPAA identifiers will qualify as PHI if included in any written or electronic document or spoken conversation:

1. Names
2. All geographical subdivisions smaller than a State, including street address, city, county, precinct, zip code, and their equivalent geocodes
3. All elements of dates (except year) for dates directly related to an individual, including birth date, admission date, discharge date, date of death, and all ages over 89 and all elements of dates (including year) indicative of such age
4. Phone numbers
5. Fax numbers
6. Electronic mail addresses
7. Social Security numbers
8. Medical record numbers
9. Health plan beneficiary numbers
10. Account numbers
11. Certificate/license numbers
12. Vehicle identifiers and serial numbers, including license plate numbers
13. Device identifiers and serial numbers
14. Web Universal Resource Locators (URLs)
15. IP address
16. Biometric identifiers, including finger and voice prints
17. Full face photographic images and any comparable images, and
18. Any other unique identifying number, characteristic, or code