[malisper]

Note that website information can still be PHI.

From[0]:

> if an individual were looking at a hospital’s webpage listing its oncology services to seek a second opinion on treatment options for their brain tumor, the collection and transmission of the individual’s IP address, geographic location, or other identifying information showing their visit to that webpage is a disclosure of PHI to the extent that the information is both identifiable and related to the individual’s health or future health care

[0] https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...