Sep 09, 2019 · Patient portals contain information that constitutes electronic protected health information (ePHI) under the HIPAA Security Rule. ePHI is defined as any protected health information (PHI) that is created, stored, transmitted, or received in any electronic format or media. Under the Security Rule, covered entities (CEs) and business associates ....