PHI in electronic form — the scope of the HIPAA Security Rule (45 CFR §164.302–318).
Electronic Protected Health Information (ePHI) is PHI maintained or transmitted electronically. It is the exclusive scope of the HIPAA Security Rule, which mandates administrative, physical, and technical safeguards.
Run a free ComplianceIQ audit against HIPAA and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.