Protected Health Information (including demographic information) about a patient that (i) is created or received by a health care provider or health plan; (ii) relates to the past, present, or future physical or mental health of the patient; and (iii) identifies the patient or with respect to which there is a reasonable basis to believe it could be used to identify the patient