Just thought the call out for "Protected Health Information" was weird, and it's wrong. If you're just having small talk with someone on a zoom call and you say "Yeah, that last COVID booster really wiped me out, I was in bed for 2 days", that doesn't mean the call contains "PHI".
First of all, you shared it. The whole reason for protecting PHI in the first place is limiting what others can do with your information, not what you can do with it. And if you share it willingly, and not for medical purposes, it doesn't mean that the person you shared it with suddenly has a higher burden of security/privacy with that info.
Just calling this out because so often see people that fundamentally misunderstand what "PHI" means in a legal sense, and specifically what the HIPAA regulations require.
First of all, you shared it. The whole reason for protecting PHI in the first place is limiting what others can do with your information, not what you can do with it. And if you share it willingly, and not for medical purposes, it doesn't mean that the person you shared it with suddenly has a higher burden of security/privacy with that info.
Just calling this out because so often see people that fundamentally misunderstand what "PHI" means in a legal sense, and specifically what the HIPAA regulations require.