A subset of health information that identifies the individual or can reasonably be used to identify the individual; HIPAA protects individually identifiable health information. ... IIHI only becomes PHI when a covered entity creates, receives, or maintains the information.