PHI (Protected Health Information)
Health information tied to an identifiable person, protected under HIPAA. Call recordings and transcripts about someone's health are PHI.
PHI is individually identifiable health information held or transmitted by a covered entity or business associate, protected under HIPAA (45 CFR Parts 160 & 164). A call recording or transcript that discusses a person's condition, treatment, or payment for care is PHI — which means it needs access controls, minimum-necessary handling, retention limits, and a business associate agreement with any vendor that processes it.
Educational, not legal advice, verify current rules with your own counsel.
Primary sources
Keep reading