What is protected health information?

Protected health information (PHI) is any information about health status, care or payment that can be linked to an individual. In NEMT, a rider's name plus a destination such as a dialysis center or methadone clinic is PHI. So are Medicaid IDs, dates of service, mobility needs and diagnosis codes on authorizations. Electronic PHI (ePHI) is the same information stored or transmitted electronically, including in driver apps and dispatch software.

Why PHI matters for NEMT

PHI is everywhere in an NEMT operation, which means the compliance rules apply everywhere: manifests, driver phones, dispatch screens visible to visitors, emails to facilities, and even conversation in a multi-loaded vehicle. Minimum necessary is the guiding principle: drivers need the rider's name, address and mobility needs, not their diagnosis. Choose software that encrypts data and controls access by role, and never store PHI in consumer messaging apps.