Protected health information (PHI)

PHI includes identifiers linked to health status, care, or payment. Marketing contact forms should not collect patient clinical details; product walkthroughs should use synthetic scenarios.

Clinic systems that store schedules, notes, messages, and bills must treat PHI handling as a shared responsibility between vendor capabilities and practice policy.