PHI & Data
Electronic Protected Health Information (ePHI)
Also known as: ePHI
PHI that is created, stored, or transmitted in electronic form.
Electronic Protected Health Information (ePHI) is protected health information that is created, received, stored, or transmitted in electronic form: for example, in a database, a web form submission, an email, or a backup file. ePHI is the specific category the HIPAA Security Rule governs.
Any website, application, or server that handles ePHI must run on infrastructure configured for HIPAA. See our complete guide to HIPAA-compliant hosting. For data that needs its own single-tenant server, see ePHI hosting.