HIPAA protects all “individually identifiable health information” held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. This is known as Protected Health Information (PHI). Examples include names, birthdates, medical records, pharmacy prescriptions, and so forth.