HIPAA definitions: protected health information (45 CFR 160.103)
Some health information is not protected health information at all: a covered entity's own employment records, education records, and records of people dead for more than 50 years.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“Protected health information excludes individually identifiable health information: (i) In education records covered by the Family Educational Rights and Privacy Act, as amended, 20 U.S.C. 1232g; (ii) In records described at 20 U.S.C. 1232g(a)(4)(B)(iv); (iii) In employment records held by a covered entity in its role as employer; and (iv) Regarding a person who has been deceased for more than 50 years.”
Where it was read
Also read from the same source
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide