HIPAA protects ALL information related to an individual's physical or mental health, including demographic and payment information, whether it is given orally, is handwritten, or is available electronically. All such information is referred to as protected health information or PHI.