When is health information considered PHI?
Health-related information is considered PHI if (any of the following are true):
- the researcher obtains the records directly from a health plan, health care clearing house, or health care provider;
- the records were created by any of the entities (aka Covered Entities) in "1" and the researcher obtains the records from an intermediate source; OR
- the researcher obtains it directly from the study subject in the course of providing treatment to the subject.
« Return to previous FAQs page