Privacy Rule Protects:
Individually Identifiable Health Information
is defined as any information collected from an individual (including demographics) that is:
•created or received by a health care provider, health plan, employer, and/or health care clearinghouse
•relates to the past, present or future:
–physical or mental health or condition of an individual,
–the provision of health care to an individual; or
–payment for the provision of health care to an individual; and
–identifies the individual and/or there is reasonable basis to believe that the information can be used to identify the individual. (45 CFR 160.103)