designated record set (HIPAA)
protections extend to protected
health information (PHI) contained in a very broadly defined
"designated records set."
This set includes
any records containing "medical ... case or medical management
... billing ... enrollment, payment, [or] claims adjudication"
information, used "in whole or in part, by or for the
covered entity to make
decisions about individuals."
receives an equally broad definition: "any item, collection,
or grouping of information" containing PHI, that is "maintained,
collected, used or disseminated by or for a covered entity."