HIPAA protects all "individually identifiable health information," including medical history, test results, insurance information, and any other data that could potentially identify the patient. This protection extends to any communications about the child's health, whether electronic, written, or spoken.