We include a listing of the new employees who are participants in the COBRA, FSA and HRA plans when we send them our invoices. I would like to know if the names of the employees are PHI and if we should send our bill via a secure mode of communication?