Are any health records exempted from the definition of PHI?
The following records ARE EXEMPTED from the definition of PHI even though they may contain health-related information: • student records maintained by an educational institution • employment records maintained by an employer related to employment status. Studies that use these kinds of records are not subject to HIPAA. However, existing IRB rules on informed consent and confidentiality still apply.