Protected health information (PHI) refers to any individually identifiable health information that is created or received by a covered entity (such as a healthcare provider, health plan, or healthcare clearinghouse) and that relates to the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or the past, present, or future payment for healthcare services provided to an individual.

PHI includes information such as a person's name, address, birth date, social security number, medical history, diagnosis, treatment information, and health insurance information. PHI is protected by the Health Insurance Portability and Accountability Act (HIPAA), which requires covered entities to implement certain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of PHI.