SECAI Core · phase 4 of 15 · noun

Protected/personal health information

Information that identifies someone as the subject of medical and insurance records, plus associated hospital and laboratory test results.

The Explain card

Plain English: PHI is information that ties a person to their medical or insurance records: diagnoses, prescriptions, lab results, billing codes, and the identifiers that link them back to a patient.
Example: A hospital deploys an AI assistant to summarize discharge notes. Someone pastes a full patient record into a public model to "save time", and the lab results, name and insurer now sit in a third party's logs outside any care agreement.
Why it matters: PHI carries strict legal handling rules, and AI pipelines create new places for it to leak: prompts, vector stores, caches and vendor telemetry. Defenders have to know where health data flows before a model touches it.
Hook: PHI is PII that has been to the doctor, and the law is far stricter about it.

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

The hospital DLP gateway scans each outbound prompt to a vendor discharge-summary model for protected/personal health information.

Why these words

protected Latin protectus, covered in front, from protegere, to cover in front supplies the US covering-word, the legal shield this stack hangs on records
personal Latin personalis, of a person, from persona, a mask or character supplies the Canadian person-word, the twin that shares the same three-letter badge
health Old English hælþ, wholeness, from Proto-Germanic hailitho, kin to whole and hale names the clinic domain, so the facts come from care rather than from a bank or a school
information Latin informatio, a giving of form, from informare, to shape or instruct supplies the head noun, the payload of facts the phrase is about

Where it came from

Origin: US and Canadian privacy-law collocation from Latin protectus (covered in front, from protegere), Latin personalis (of a person, from persona), Old English hælþ (wholeness), and Latin informatio (a giving of form)
Entered the language: late 1990s
What changed: Protected had meant covered in front since the late 1300s. Personal had meant of a person, from a mask on a stage. Health had meant wholeness in Old English and kept the body sense. Information had meant instruction, then news, then the records a machine keeps. Canadian statutes of the late 1990s stacked personal with health information, US HIPAA drafting stacked protected instead, and the slash in this glossary keeps both names that later share the badge PHI.

How it is spelled

Pattern: ct keeps the Latin tect of tegere, to cover
Pattern: personal keeps one n
Pattern: ea in health spells /ɛ/, as in wealth and stealth
Pattern: -tion from Latin -tio, with t as /ʃ/ in information
Breaks the pattern: the slash is a glossary device; US statutes write protected health information and Canadian ones write personal health information
Breaks the pattern: information is a mass noun here, so no plural even when the files are many
Breaks the pattern: the noun phrase stays three words plus a slash; hyphens appear only when the stack modifies another noun

Spelled like

Broken into chunks

What it sits beside

Same subject

Same shape

Privacy-law labels

Health-information stack

Information compounds

Phase 4: Data Integrity, Governance, and Provenance

Once you know what data is, learn the principles that keep it trustworthy, traceable, and minimized throughout its lifecycle.