Under the Health Insurance Portability and Accountability Act (HIPAA), any data, oral or recorded in any medium that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse. The data relate to the past, present, or future physical or mental health or condition of an individual or future payment for the provision of health care to an individual.