Skip to content

Glossary

PHI

Quick answer

Protected health information: health details tied to an identifiable person, such as diagnoses, treatment notes, claims or appointment records.

In the U.S., HIPAA governs PHI held by covered entities (health plans, providers, clearinghouses) and their business associates. It covers 18 identifiers, including names, dates more specific than the year, contact details and record numbers.

Records containing PHI can only be shared for AI work once they are de-identified under HIPAA's Safe Harbor or Expert Determination method, or with patient authorization. SourceX treats any PHI as excluded unless the right method has been documented and the business approves the release.

Why PHI matters when licensing company data to AI

PHI, or protected health information, is health detail tied to an identifiable person, such as diagnoses, treatment notes, claims or appointment records. Under HIPAA, it can be shared for AI work only after de-identification by a documented Safe Harbor or Expert Determination method, or with patient authorization. Without one of these, PHI is excluded from any licensed dataset.

  1. 01Your work records
  2. 02Personal details removed
  3. 03You approve the release
  4. 04Licensed to AI developers
How it works with SourceX: Your work records → Personal details removed → You approve the release → Licensed to AI developers.Illustrative

Related terms

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if your company qualifies Talk to SourceX
See if your company qualifies