Individually identifiable health information held or transmitted by a HIPAA covered entity or business associate, in any form or medium.