Under HIPAA, which term defines information created or received by a health care provider related to a patient’s health?

• A. Protected Health Information
• B. Personal Data
• C. Confidential Information
• D. Medical Record

Answer: (A)

Protected Health Information is the term HIPAA uses for information created or received by a health care provider about a patient’s health that can identify the patient and is transmitted or stored in any form. This covers diagnoses, treatment, billing, or any health details linked to the person, whether it appears in a chart, an email, a billing record, or a conversation. That breadth—health-related information tied to a patient and identifiable in any medium—makes it the best fit for the scenario.

Personal Data is a broad label for general personal information and doesn’t specifically capture the health-related and HIPAA-defined context. Confidential Information is a general term used across many contexts and not unique to HIPAA’s health information framework. A Medical Record is a specific compilation of health information, which is part of PHI, but PHI includes more than just the formal medical record.