During a training session on safeguarding client information, the nurse educator asks which of the following data points should be treated as protected health information (PHI) according to HIPAA regulations. (Select All that Apply.)

Client's Social Security number

Medication brand name listed in a general hospital formulary

Patient's medical record number

Photographs taken during the patient's hospitalization

Nurse's notes documenting the patient's diagnosis

Public hospital directory listing patient names for visitors

Patient's assigned hospital room number