> Do you have any sources that go into more detail? When I've worked on PII in analytics... PHI is an incredibly well-defined term legally and is not equivalen

> Do you have any sources that go into more detail? When I've worked on PII in analytics... PHI is an incredibly well-defined term legally and is not equivalent to PII. Some things that constitute PHI actually wouldn't qualify as PII. There are a lot of resources that explain HIPAA in great detail; if you want to know the specifics like here, you have to read the bill and the case law itself.