Protected health information (PHI) is individually identifiable health information that is held or transmitted by a covered entity (or its business associate) in any form or media, whether electronic, paper, or oral. Individually identifiable health information includes common identifiers such as name, address, social security number, date of birth, or any other information that can be used to identify the individual.