PHI is individually identifiable health information that is created, transmitted, or maintained by a covered entity. If it is electronically transmitted it falls under the HIPAA security as well as privacy regulations. PHI in electronic form is sometimes referred to as EPHI.