The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule provides standards for the use and disclosure of “individually identifiable health information,” dubbed protected health information, or PHI. PHI is information, including demographic information, that relates to an individual’s physical or mental health, the provision of health care to the individual, or payment for