HIPAA Glossary · Data & information types
IIHI
Also: individually identifiable health information
Individually identifiable health information — health information that identifies an individual or could reasonably be used to.
Context
IIHI is the broader category; PHI is IIHI when held by a regulated entity. The same health data in your fitness app or a direct-to-consumer product may be IIHI but is not PHI because the entity holding it is not covered by HIPAA. The distinction matters for scope arguments and for de-identification analysis.
Related terms
- PHI — Protected health information — individually identifiable health information held or transmitted by a covered entity or business associate, in any form.
- De-identification — Removing identifiers so information is no longer PHI and falls outside HIPAA. Two accepted methods: Expert Determination and Safe Harbor.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.