What is personally identifiable information?

The combination part is what people miss. A ZIP code alone is not much. Add a date of birth and a first name, and it usually points at one person.

Phone calls make it constantly. A name, a number, an address, a reason for calling, and often somebody else's name too.

The caller's number identifies someone by itself. That makes a bare call log a record about people rather than a record of traffic.

Laws draw the line in different places. The safer working assumption is that your call records count.

Say one of your veterinary clinic's call summaries reads: "Caller from Maple Court asked about insulin for an older beagle, prefers mornings, works nights at the hospital." You won't find a name in it, or a phone number. Show that line to anyone who lives on Maple Court, though, and they'll know exactly who it is. One street holds very few night-shift hospital workers with a diabetic beagle.

Researcher Latanya Sweeney made this point with census data years ago. She found that ZIP code, birth date and sex together were enough to single out most Americans. Notice that none of those three is a name. Your call records hold richer details than that, in the caller's own words. Each summary you forward or paste into a group chat carries them along with it.

Pick one real call from last week and trace every place it went. Start with your phone system, then the email inbox that received the summary. After that, check your CRM, any spreadsheet someone keeps on the side, and the team chat where a screenshot may have been posted. You'll probably find five or six copies when you expected two.

For each copy, write down who can open it and when it gets deleted. "Everyone" and "never" are common answers, and those are the ones to fix first. Turning off summary emails to people who don't act on them is usually the quickest win.

Here's where it matters less: a first name and a callback number on a sticky note that goes in the shredder tonight. Short life and one reader is about as safe as personal data gets. Trouble starts when the same details sit in a searchable system for four years because nobody ever decided they shouldn't.

Call records hold what the caller told you, and you control how long they are kept through the retention setting.

GreetKeeper carries no certifications and makes no HIPAA claim. That claim needs a signed agreement with every layer touching patient information, including the carrier and the speech services, and we do not make it.

For healthcare, keep the assistant scoped to inquiries and scheduling, and keep clinical detail in your practice system.