protected health information (PHI)
                        
                            GPTKB entity
                        
                    
                Statements (50)
| Predicate | Object | 
|---|---|
| gptkbp:instanceOf | gptkb:law | 
| gptkbp:abbreviation | PHI | 
| gptkbp:appliesTo | electronic, paper, and oral forms | 
| gptkbp:canBeDe-identifiedBy | removal of 18 identifiers | 
| gptkbp:canBeDisclosedFor | gptkb:psychotherapy gptkb:payment judicial proceedings healthcare operations law enforcement purposes public health activities research (with conditions) | 
| gptkbp:de-identifiedPHI | not subject to HIPAA | 
| gptkbp:definedIn | gptkb:Health_Insurance_Portability_and_Accountability_Act_(HIPAA) | 
| gptkbp:excludes | education records covered by FERPA employment records held by a covered entity in its role as employer | 
| gptkbp:firstDefined | 1996 | 
| gptkbp:includes | gptkb:address IP address date of birth account number web URLs biometric identifiers Social Security number any unique identifying number or code certificate/license number device identifiers full face photographic images health plan beneficiary number medical record number patient name vehicle identifiers | 
| gptkbp:mustBeProtectedBy | business associates covered entities | 
| gptkbp:penalty | criminal penalties civil penalties | 
| gptkbp:protectedBy | gptkb:HIPAA_Privacy_Rule gptkb:HIPAA_Security_Rule | 
| gptkbp:regulates | gptkb:U.S._Department_of_Health_and_Human_Services_(HHS) | 
| gptkbp:relatedTo | healthcare privacy medical records | 
| gptkbp:subject | minimum necessary standard patient authorization for disclosure | 
| gptkbp:usedBy | healthcare providers health plans healthcare clearinghouses | 
| gptkbp:bfsParent | gptkb:Health_Insurance_Portability_and_Accountability_Act_(HIPAA) gptkb:Health_Insurance_Portability_and_Accountability_Act_of_1996 | 
| gptkbp:bfsLayer | 7 | 
| https://www.w3.org/2000/01/rdf-schema#label | protected health information (PHI) |