HIPAA protects ALL information related to an individual's physical or mental health, including demographic and payment information, whether given orally, handwritten, or available electronically. All such information is referred to as protected health information or PHI.