PHI coverage extends to which of the following?

• A. PHI includes any device used to obtain or transmit PHI communications, whether at home or in the office.
• B. PHI includes only paper records.
• C. PHI excludes digital communications.
• D. PHI is public information.

Answer: (A)

PHI coverage includes any device used to obtain or transmit PHI communications, whether at home or in the office. Under HIPAA, protected health information is any individually identifiable health information created, received, or maintained by a covered entity or business associate, in any form or medium. This means PHI spans not just paper records but digital data and the devices and channels used to handle it—emails, texts, telehealth platforms, patient portals, cloud storage, laptops, smartphones, and other electronic devices. Because PHI can be stored or transmitted electronically, safeguarding ePHI is a central obligation, with protections like encryption, access controls, and the minimum necessary rule.

The other statements don’t fit because PHI is not limited to paper records, nor does it exclude digital communications; and PHI is not public information—it's confidential and may only be shared under proper authorizations or legal allowances.