Individually identifiable health information transmitted or maintained in any form or medium, which is held by a covered entity or its business associate.

Identifies the individual or offers a reasonable basis for identification.

Is created or received by a covered entity or an employer

Relates to a past, present, or future physical or mental condition, provision of health care or payment for health care.