Learn about the benefits of membership within the NCMS and join today!
Learn More >
Access the NCMS Member Center, your gateway to benefits and resources designed to help you and your patients thrive...
Learn More >
Manage your physicians’ membership and access tools to make your job easier...
Learn More >
Tap into the a wealth of resources for patients and providers...
Learn More >

Medico-Legal Guidelines Appendix A-1

Appendix A-1

Relevant HIPAA Definitions


45 C.F.R. 160.103 Definitions.

Health information means any information, whether oral or recorded in any form or medium, that:

  1. Is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; and

  2. Related to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.

Individually identifiable health information is information that is a subset of health information, including demographic information collected from an individual, and:
  1. Is created or received by a health care provider, health plan, employer, or health care clearinghouse; and

  2. Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and

    1. That identifies the individual; or

    2. With respect to which there is a reasonable basis to believe the information can be used to identify the individual.

45 C.F.R. 164.501 Definitions.

Designated record set means:
  1. A group of records maintained by or for a covered entity that is:
    1. The medical records and billing records about individuals maintained by or for a covered health care provider;

    2. The enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for a health plan; or

    3. Used, in whole or in part, by or for the covered entity to make decision about individuals.

  2. For purposes of the paragraph, the term records means any item, collection, or grouping of information that includes protected health information and is maintained, collected, used, or disseminated by or for a covered entity.

Protected health information means individually identifiable health information:
  1. Except as provided in paragraph (2) of this definition, that is:
    1. Transmitted by electronic media;

    2. Maintained in any medium described in the definition of electronic media at § 162.103 of this subchapter; or

    3. Transmitted or maintained in any other form or medium.

  2. Protected health information excludes individually identifiable health information in:
    1. Education records covered by the Family Educational Right and Privacy Act, as amended, 20 U.S.C. 1232g;

    2. Records described at 20 U.S.C. 1232g(a)(4)(B)(iv); and

    3. Employment records held by a covered entity in its role as employer.

Psychotherapy notes means notes records (in any medium) by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint, or family counseling session and that are separated from the rest of the individual's medical record.

Psychotherapy notes excludes medication prescription and monitoring, counseling session start and stop times, the modalities and frequencies of treatment furnished, results of clinical tests, and any summary of the following items: Diagnosis, functional status, the treatment plan, symptoms, prognosis, and progress to date.