Health Insurance Portability and Accountability Act (HIPPA) Practice Exam

Which of the following would be considered PHI?

1. An individual's first and last name and the medical diagnosis in a physician's progress report

2. Individually identifiable health information in employment records held by a covered entity in its role as an employer

3. Results of an eye exam taken at the DMV as part of a driving test

4. IIHI of persons deceased more than 50 years

The correct answer is: An individual's first and last name and the medical diagnosis in a physician's progress report

The choice indicating that an individual's first and last name along with the medical diagnosis in a physician's progress report would be considered Protected Health Information (PHI) is correct because PHI encompasses any information that can identify an individual and relates to their health or healthcare. The combination of a person's name and their medical diagnosis is directly identifiable and clearly relates to their health, meeting the criteria set forth by HIPAA for PHI. This definition captures the essence of what constitutes sensitive health information that must be protected under HIPAA regulations. Since this information connects an individual to their medical history, it is crucial in ensuring that confidentiality is maintained. In contrast, individually identifiable health information in employment records may not be viewed as PHI when the context relates solely to employment consequences, even if it might contain health-related data. Results of an eye exam taken at the DMV for a driving test are not considered PHI since they are part of a public service and do not typically relate to ongoing healthcare. Furthermore, the information regarding individuals who have been deceased for more than 50 years does not qualify under the PHI protection criteria, as HIPAA primarily pertains to living individuals and does not extend to the health information of deceased persons after a defined period.