Protected health information (PHI) is health information linked to an identifiable person. Under HIPAA it covers far more than medical records.
Why It Matters
On a healthcare website, a page URL, a search term or a form step can reveal a condition or an appointment type. Combined with an IP address or cookie ID, that can be PHI.