UC San Diego SearchMenu

Protected Health and Personally Identifiable Information

Learn more about protected health and personally identifiable information.

Protected health information (PHI) and personally identifiable information (PII) is confidential and shall not be accessed or viewed other than for the sole purpose of performing employment duties and responsibilities. Do not attach, upload, or include PHI or PII to any Marketplace requisition.

Expand all

What is Personally Identifiable Information (PII)

PII refers to information which can be used to distinguish or trace an individual’s identity (e.g. name, Social Security Number, biometric records, etc.) alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual (e.g. date and place of birth, mother’s maiden name). 

Cal. Civil Code § 1798.29 defines personal information as an individual’s first name or first initial and last name in combination with any one or more of the following data elements (when either the name or the data elements are not encrypted):

  • Social Security Number;
  • Driver’s license number or California Identification Card Number; or
  • Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual’s financial account.

What is Protected Health Information (PHI)

PHI is any individually identifiable health information that UC San Diego uses, creates, or maintains in the course of providing treatment, obtaining payment for services, or while engaged in health care operations, including teaching and research activities. 

Individually identifiable health information is information, including demographic data that relates to:

  • the individuals’ past, present, or future physical or mental health or condition;
  • the provision of health care to the individual; or
  • the past, present, or future payment for the provision of health care to the individual.

The information must identify the individual or there must be a reasonable basis to believe that it can be used to identify the individual.  Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number, etc).

See complete list of 18 PHI identifiers

Training and Additional Information

  • Do not attach, upload, or include PHI or PII to any Marketplace requisition. PHI and/or PII should not be included on supplier invoices unless absolutely necessary.  If PHI and/or PII must be included on invoices to verify a supplier’s services, the department should contact Accounts Payable via ASK (login required) prior to submitting the requisition.
  • For UC San Diego Health Science’s Annual Online HIPAA Training, please access UC Learning Center and search keyword, “HIPAA”. 
  • For questions about Marketplace submit an ASK case (login required) or call (858) 534-9494.

Expand all