Skip to main content

Table 1 PHI types defined by HIPAA

From: Automated de-identification of free-text medical records

PHI Type Notes
Names Both full and partial, but not initials
Locations All geographic subdivisions smaller than a state, including street address, city, county, precinct, zip code, and their equivalent geocodes
Dates All elements of dates (except years) for dates directly related to an individual, including birth date, admission date, discharge date, date of death
Ages > 89 years All elements of dates (including year) indicative of an age over 89 years. Such ages and elements may be aggregated into a single category of age 90 or older
Telephone numbers  
Fax numbers  
Electronic mail addresses  
Social security numbers  
Medical record numbers  
Health plan beneficiary numbers  
Account numbers  
Certificate/license numbers  
Vehicle identifiers Includes vehicle serial numbers and license plate numbers
Device identifiers and serial numbers Not restricted to medical devices
Web Universal Resource Locators (URLs)  
Internet Protocol (IP) address numbers  
Biometric identifiers Includes finger and voice prints
Any other unique identifying number, code, or characteristic E.g., full face photographic images of full faces, scars or tattoos (and any comparable images).