To comply with the federal government’s Health Insurance Portability and Accountability Act (HIPAA), Protected Health Information (PHI) cannot be included when reconciling your PCard transactions. PHI is generally defined as any information—spoken, written, or recorded—that concerns the health of an individual or identifies that person in some way (e.g., name, Social Security Number, etc.,).