SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-ephi-definition

What is electronic protected health information, or ePHI?

Health data sent or stored electronically counts as ePHI.

Start playing free

  1. Health data transmitted or maintained electronically ✔
  2. Only paper medical charts
  3. Employee payroll files

Why: The Security Rule protects ePHI, which is PHI transmitted by or maintained in electronic media. Paper records are handled under the Privacy Rule.

Huh, didn't know that: ePHI can include records in an EHR, emails, and files on a laptop.

The dad joke
Why did the ePHI file get promoted? It had excellent byte-sized reports.
Like this card?
Play the game

References

Answer: Health data transmitted or maintained electronically. The Security Rule protects ePHI, which is PHI transmitted by or maintained in electronic media. Paper records are handled under the Privacy Rule.

  1. 45 CFR 160.103 Definitions (electronic protected health information, protected health information) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-A/section-160.103
    Protected health information means individually identifiable health information: ... (i) Transmitted by electronic media; (ii) Maintained in electronic media
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWho must comply with the HIPAA Security Rule?Work SkillsWhat are administrative safeguards in the HIPAA Security Rule?Work SkillsWhat are physical safeguards under the Security Rule?

That's stuff everyone should know.