Tag: PHI

Question: We are seeking to better understand what is considered protected health information (PHI). Can you provide best practices for separating employment and PHI files? Answer: Most all “individually identifiable health information” held or transmitted by a covered entity or its business associate — in any form or medium, whether electronic, on paper, or oral — is…

Question: We recently advised a client to keep protected health information (PHI) filed separately from other employee data. While we have this recommendation in writing from our attorneys to us in a HIPAA business associate agreement (BAA), I am not able to find any documentation that as a plan sponsor an employer should also follow…