The Privacy Rule describes the types of individually identifiable health information, known as protected health information, or PHI, that business associates are responsible for safeguarding. This includes defining who can use, disclose, or access it.