are patient initials considered phi?
HHS Publishes Guidance on How to De-Identify Protected Health Information. ... It notes that derivations of one of the 18 data elements, such as a patient's initials or last four digits of a Social Security number, are considered PHI.