Which of the following is an example of Protected Health Information?

• A. Medical record number
• B. De-identified data
• C. Facility address
• D. Patient age

Answer: (A)

Protected Health Information is data about a person’s health status, care, or payment for care that can identify that individual. The medical record number is a direct identifier used within a health system to link all of a patient’s health information, so it clearly qualifies as PHI. De-identified data has had identifiers removed and is not PHI. A facility address by itself does not convey health information, and age alone is just a demographic detail without health data attached, so neither alone is PHI. Once health information is linked to an identifier like a medical record number, it becomes PHI.