Any information that identifies an individual based off:
- Private health information provided by doctors, nurses, and other healthcare providers for a medical record
- Conversations between a doctor, or nurse, and a patient regarding care or treatment
- Private health information stored by a health care provider
- Billing information
- Common identifiers of an individual (e.g., name, address, birth date, Social Security Number).
Such information is not to be provided or recorded: verbally, written, or in any other form or medium.