Personal health information (PHI) is considered sensitive PII. Medical patients have a host of sensitive PII, like medical record numbers, medical histories, test results, and health insurance beneficiary numbers. When paying for health services, the patient’s payment information is deemed PII.
PHI is obtained by healthcare providers, life insurers, schools, universities, or healthcare clearing houses. This type of data relates to the past, present, or future health of the individual. PHI can be transmitted electronically or maintained electronically and identifies individuals.