ePHI (Protected Health Information)
The HIPAA privacy rule requires providers to protect all individually identifiable health information that is held or transmitted. HIPAA Regulations call out 18 specific identifiers that are classified as protected health information and must receive special treatment.
- 1. Name
- 2. Address (including subdivisions smaller than state such as street address, city, county, or zip code)
- 3. Any dates (except years) that are directly related to an individual, including birthday, date of admission or discharge, date of death, or the exact age of individuals older than 89
- 4. Telephone number
- 5. Fax number
- 6. Email address
- 7. Social Security number
- 8. Medical record number
- 9. Health plan beneficiary number
- 10. Account number
- 11. Certificate/license number
- 12. Vehicle identifiers, serial numbers, or license plate numbers
- 13. Device identifiers or serial numbers
- 14. Web URLs
- 15. IP address
- 16. Biometric identifiers such as fingerprints or voice prints
- 17. Full-face photos
- 18. Any other unique identifying numbers, characteristics, or codes
