[kindall]

PHI means protected health information. Protected means protected by HIPAA. By definition, there is no PHI not protected by HIPAA. HIPAA is concerned with what health information must be protected and defining that defines PHI.

[Dylan16807]

The exact same information can be held by two different companies, yet only one of those companies is obligated to protect it.