Which of the following is NOT electronic PHI (ePHI)?

Which of the following is NOT electronic PHI (ePHI)?

a) Health information maintained in an electronic health record

b) Health information emailed to an insurer for billing purposes

c) Health information stored on paper in a file cabinet

d) Health information on a flash drive

Answer: c) Health information stored on paper in a file cabinet

The electronic Protected Health Information (ePHI) involves any protected information that is created, stored, transmitted, or received in the electronic form. Being in the physical (long-hand) format and stored in the physical cabinet, paper-based health records’ do not come under the ePHI category. Alternatives a), b), and d) are digital footsteps entailing ePHI in electronic forms such as EHR, Email, and removable storage devices subject to specific health information privacy and security regulations under HIPAA