PHI refers to protected health information that must be kept private. Viewing or discussing a patient's PHI without a work-related need constitutes a HIPAA breach, which must be immediately reported to the organization's HIPAA officer. For more details on HIPAA privacy and security, visit HHS.gov.

1. PHI
PHI is Protected Health Information. You are
responsible for keeping patients' PHI private.
Viewing, reading, or discussing a patient’s PHI that is not necessary for
the completion of your job is a HIPAA breach.
WHAT IF THERE IS
A HIPAA BREACH?
If the privacy/security of a patient’s PHI may have been
compromised in any way, the incident must be
immediately reported to the organization’s HIPAA
officer.
HIPAA
RESOURCES
For more information on HIPAA, visit HHS.gov
CONFIDENTIALITY
U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES. (2021, MARCH 31). HEALTH INFORMATION PRIVACY. HHS.
HTTPS://WWW.HHS.GOV/HIPAA/FOR-PROFESSIONALS/SECURITY/INDEX.HTML
Reference
Quick Guide