types of data that are considered protected health information (phi)
any information about health status , provision of health care , or payment for health care that is created or collected by a Covered Entity ( or a Business Associate of a Covered Entity ) , and can be linked to a specific individual