Protected health information (PHI): any information about health status, provision of health care, or payment for health care that is created or collected by a “Covered Entity” and can be linked to a specific individual. This is interpreted rather broadly and includes any part of a patient medical record or payment history.
Covered Entity: a health plan, a health clearinghouse, or a health care provider who transmits any health information in electronic form in connection with a standard financial or administrative transaction.
Minimum Necessary: employees should access the minimum necessary PHI to perform their job duties.