Protected health information (PHI) represents information about health status, healthcare treatment, or healthcare payment created or collected by a Covered Entity or Business Associate about a specific individual. There are 18 data points classified by HIPAA that fall under PHI, ranging from names to URLs, IP address numbers to any other unique identifying number, code, or traits that trace back to the individual patient.