Information that comes within paragraphs (1)(i) or (1)(ii) of the definition of protected health information (see “protected health information”).
Source(s):
NIST SP 800-66 Rev. 1
under Electronic Protected Health Information (electronic PHI, or EPHI)
from
45 C.F.R., Sec. 160.103