Which term refers to electronic Protected Health Information under HIPAA?

• A. ePHI (Electronic Protected Health Information)
• B. PHI (Protected Health Information)
• C. PII (Personally Identifiable Information)
• D. EHR data (Electronic Health Records)

Answer: (A)

Under HIPAA, Protected Health Information (PHI) covers health information that can identify a person and relates to their health status, care, or payment for care, and this applies no matter the format. When that PHI exists in electronic form, the specific term used is electronic Protected Health Information, or ePHI. The distinction matters because ePHI triggers the same HIPAA protections as PHI but refers specifically to information stored, transmitted, or processed electronically, with corresponding security safeguards. The other terms aren’t as precise for this question: PHI is the broader concept across all formats; PII is any personally identifiable information and isn’t HIPAA-specific; EHR data refers to data in electronic health records and may include PHI but is not the HIPAA-designated term for electronic health information.