Term:Individually Identifiable Health Information

From FISMApedia
Jump to: navigation, search

DoD 8580.02-R

Individually Identifiable Health Information - Information that is a subset of health information, including demographic information collected from an individual, and: DL1.26.1. Is created or received by a healthcare provider, a health plan, or an employer; and DL1.26.2. Relates to the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or past, present, or future payments for the provision of healthcare to an individual; and: DL1.26.2.1. Identifies the individual; or DL1.26.2.2. There is a reasonable basis to believe the information can be used to identify the individual. DL1.26.

NIST SP 800-66r1

Individually Identifiable Health Information (IIHI) - Information that is a subset of health information, including demographic information collected from an individual, and:

(1) Is created or received by a healthcare provider, health plan, employer, or healthcare clearinghouse; and
(2) Relates to the past, present, or future physical or mental health or condition of an individual; the provision of healthcare to an individual; or the past, present, or future payment for the provision of healthcare to an individual; and
(i) That identifies the individual; or
(ii) With respect to which there is a reasonable basis to believe the information can be used to identify the individual. [45 C.F.R. Sec. 160.103]

NIST SP 800-66

Individually Identifiable Health Information (IIHI) - Information that is a subset of health information, including demographic information collected from an individual, and:

(1) Is created or received by a health care provider, health plan, employer, or health care clearinghouse; and
(2) Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and
(i) That identifies the individual; or
(ii) With respect to which there is a reasonable basis to believe the information can be used to identify the individual. [45 C.F.R. Sec. 160.103]