So what does the end of life on XP computers mean to HIPAA compliant organizations? Next month on April 8, 2014, Microsoft will stop supplying security updates and patches for Windows XP and Office 2003. So does that mean you have to instantly replace all your computers running Windows XP? When I look at all the workstations at a Hospital, Clinic or Doctors Office I may find machines that do not access PHI. PHI is Personal Health Information or ePHI Electronic Personal Health Information is the data that HIPAA is requiring you to protect.