designated record set (HIPAA)

Formally, HIPAA protections extend to protected health information (PHI) contained in a very broadly defined "designated records set."

This set includes any records containing "medical ... case or medical management ... billing ... enrollment, payment, [or] claims adjudication" information, used "in whole or in part, by or for the covered entity to make decisions about individuals."

"Record" receives an equally broad definition: "any item, collection, or grouping of information" containing PHI, that is "maintained, collected, used or disseminated by or for a covered entity."

See also:


   © 2002-2006 Contributing authors and University of Miami School of Medicine