Hipaa protects a category of information known as protected health information (phi). phi covered under hipaa includes:
a. identifiable health information that is created or held by covered entities and their business associates, provided the data subject is a us citizen.
b. any identifiable health information.
c. identifiable health information that is created or held by covered entities and their business associates that operate across state lines.
d. identifiable health information that is created or held by covered entities and their business associates.