Frequently Asked Questions : Privacy

What is individually identifiable health information?

HIPAA defines “individually identifiable health information” as information that is a subset of health information, including demographic information collected from an individual, and:

  1. Is created or received by a health care provider, health plan, employer, or health care clearinghouse; and
  2. Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and
    • That identifies the individual; or
    • With respect to which there is reasonable basis to believe the information can be used to identify the individual.