HIPAA Privacy Rule

 Any oral, paper, or electronic information related to: (1) the past, current, or future medical or mental health information about an individual; (2) the provision of health care to the individual; or (3) payment for healthcare; and  Anything that is “individually identifiable,” meaning any information that could be used to identify him or her. There are no restrictions on the use or disclosure of deidentified health information.