Which of these is considered "Protected Health Information" (PHI)?
Answer choices
- ADrug name only
- BPatient name
- CDoctor name
- DPharmacy address
About this question
Which of these is considered Protected Health Information (PHI)? For HIPAA pharmacy technician questions on the PTCE, PHI is individually identifiable health information — data that can identify a patient and relates to their care. Federal Requirements scenarios often mix true PHI with non-identifiers.
A patient name linked to a pharmacy record is a classic PHI example. Drug name alone, physician name alone, or a pharmacy address alone is usually not enough without identifiers. Build this recognition skill for minimum necessary disclosures and privacy counseling on exam day.
Reveal answer & explanationShow
Correct answer
- ADrug name only
- BPatient nameCorrect
- CDoctor name
- DPharmacy address
Basic rationale
PHI includes any information that can identify a patient (Name, DOB, Address) linked to their health condition.
Option explanations
- A: Incorrect. A medication name by itself is general information and not protected unless linked to a specific patient.
- B: Correct. A patient's name is a primary identifier and is considered PHI under HIPAA privacy rules.
- C: Incorrect. Provider names are public information and do not constitute protected patient data.
- D: Incorrect. Business addresses are public records and are not protected health information.
Deep Analysis
Core logic
Protected Health Information (PHI) is a specific term defined by HIPAA. It is any 'individually identifiable' health information. For something to be PHI, it must meet two criteria: 1) It identifies the patient (Name, ID number, DOB, etc.) and 2) It relates to their health, treatment, or payment.
Distractor analysis
A: A drug name alone (like 'Lisinopril') is not PHI if it isn't attached to a specific person. C: A doctor's name is public professional information and is not protected by HIPAA. D: A pharmacy's address is a public business location and not private health data.
Exam trap
Even a patient's ZIP code can be PHI if the population is small enough to identify them. If you see a piece of info that could lead you back to a specific person's medical file, treat it as PHI.
Memory tip
👤 PHI = 'Personal-Health-Identity'. If it links a 'Person' to their 'Health', it's protected.
Ready for more Federal Requirements questions? Sign in to practice.
Related questions
- Which DEA form must be used to order Schedule II drugs like Oxycodone?View question
- A patient wants to know why you are giving them a "HIPAA" form. What is it for?View question
- How many refills are legally allowed on a prescription for Percocet (Schedule II)?View question
- How often does the DEA require a pharmacy to perform a complete controlled substance inventory?View question
Master Federal Requirements for CPhT (PTCE)
Sign in to practice this domain with blueprint-aligned questions, mocks, and AI explanations — then track what to study next.