PHI Use Acknowledgment
Quick note before you start
Please don't enter patient identifiers such as: names, DOB, MRN, addresses. We screen inputs for PHI, but please be mindful not to enter it. Use "Pt", "Client", or "Resident" instead.
What counts as PHI?
Under HIPAA, Protected Health Information includes any of the following when tied to a patient's health, care, or payment:
- Names (patient, relatives, employers, household members)
- Geographic info smaller than a state — street address, city, county, ZIP
- Dates tied to the patient — birth, admission, discharge, death, exact ages over 89
- Phone and fax numbers
- Email addresses
- Social Security numbers
- Medical record numbers
- Health plan beneficiary numbers
- Account numbers
- Certificate or license numbers
- Vehicle identifiers and license plates
- Device identifiers and serial numbers
- Web URLs and IP addresses
- Biometric identifiers — fingerprints, voiceprints
- Full-face photos and comparable images
- Any other unique identifying number, characteristic, or code
When in doubt, use "Pt", "Client", or "Resident" in place of names, and avoid specific dates or locations.
Acknowledgment
I understand I should not enter PHI unless my organization has a signed BAA with NoteyDoc.
This acknowledgement does not replace a Business Associate Agreement and does not authorize PHI use unless your account or organization is BAA-active and PHI-enabled.