Da Vinci Clinical Data Exchange (CDex)
2.1.0 - STU 2.1 United States of America flag

Da Vinci Clinical Data Exchange (CDex), published by HL7 International / Payer/Provider Information Exchange Work Group. This guide is not an authorized publication; it is the continuous build for version 2.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/davinci-ecdx/ and changes regularly. See the Directory of published versions

: CDex Data Consumer Requirements

Page standards status: Trial-use Maturity Level: 2

Raw xml | Download


<Requirements xmlns="http://hl7.org/fhir">
  <id value="cdex-data-consumer"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: Requirements cdex-data-consumer</b></p><a name="cdex-data-consumer"> </a><a name="hccdex-data-consumer"> </a><table class="grid"><tr><td><b><a name="CONF-009"> </a></b>CONF-009</td><td>SHALL</td><td><div><p>When signatures are required, the Data Consumer <strong>SHALL</strong> use a [FHIR RESTful search] instead of [FHIR RESTful read]. There is no CDex support for signatures on a FHIR RESTful read because it fetches a single instance of a resource instead of a Bundle. If the Data Consumer attempts to fetch a resource with a read and a signature is required, the Data Source/Responder</p>
</div><p>Links: </p><ul><li>References: <a href="direct-query.html#data-sourceresponder-requirements">direct-query.html</a></li></ul></td></tr><tr><td><b><a name="CONF-011"> </a></b>CONF-011</td><td>SHALL</td><td><div><p>The [Da Vinci] initiative supports this implementation guide. Da Vinci is a private effort to accelerate the adoption of Health Level Seven International Fast Healthcare Interoperability Resources (HL7® FHIR®) as the standard to support and integrate value-based care (VBC) data exchange across communities. This guide and implementers of it <strong>SHALL</strong> adhere to the [HL7 Da Vinci Guiding Principles] for exchanging patient health information.</p>
</div><p>Links: </p><ul><li>References: <a href="index.html#about-this-guide">index.html</a></li></ul></td></tr><tr><td><b><a name="CONF-014"> </a></b>CONF-014</td><td>SHALL</td><td><div><p>This implementation guide inherits all of the mandatory requirements and recommendations defined in the [HRex Security and Privacy] specification.   Implementers <strong>SHALL</strong> read and adhere to the guidance for the following topics:</p>
</div><p>Links: </p><ul><li>References: <a href="security.html#da-vinci-hrex-security-and-privacy-requirements">security.html</a></li></ul></td></tr><tr><td><b><a name="CONF-015"> </a></b>CONF-015</td><td>SHALL</td><td><div><ol>
<li>User scopes <strong>SHALL</strong> be used as defined in [SMART App Launch] to restrict access to the relevant patients for a given Data Consumer. Organizational user access scopes are typically pre-negotiated and documented via business agreements. Data Sources shall translate these agreements into the appropriate SMART App Launch scopes.</li>
</ol>
</div><p>Links: </p><ul><li>References: <a href="security.html#general-considerations">security.html</a></li></ul></td></tr><tr><td><b><a name="CONF-016"> </a></b>CONF-016</td><td>SHALL</td><td><div><ol>
<li>Audit mechanisms <strong>SHALL</strong> be in place so that exchange mechanisms <em>with or without human intervention</em> can be subject to review/oversight.</li>
</ol>
</div><p>Links: </p><ul><li>References: <a href="security.html#general-considerations">security.html</a></li></ul></td></tr><tr><td><b><a name="CONF-018"> </a></b>CONF-018</td><td>SHALL</td><td><div><p>communicate the POU for the requested data for each Task using codes from the [CDex Purpose of Use Value Set] in the POU <code>Task.input</code> element. The Data Consumer and Data Source <strong>SHALL</strong> use it to communicate the POU for the requested data when trading partner agreements require the POU to be exchanged.&lt;/span&gt;&lt;!-- new-content --&gt;</p>
</div><p>Links: </p><ul><li>References: <a href="security.html#purpose-of-use">security.html</a></li></ul></td></tr><tr><td><b><a name="CONF-057"> </a></b>CONF-057</td><td>SHALL</td><td><div><p><strong>For CDex Task-based transactions, the [CDex Task Data Request Profile] SHALL be used by the Data Consumer to solicit information from a system.</strong> It represents <em>both</em> the data request and the returned data and provides information such as why it needs to be completed, who is to complete it, who is asking for it, when it is due, etc. The Task's status is updated as the task is fulfilled. For a detailed description of all the mandatory, [<em>must support</em>], and optional elements, as well as formal definitions and profile views, see the [CDex Task Data Request Profile] page.</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-approach.html#the-task-resource">task-based-approach.html</a></li></ul></td></tr><tr><td><b><a name="CONF-058"> </a></b>CONF-058</td><td>SHALL</td><td><div><p>When known, <code>Task.reasonCode</code> or <code>Task.reasonReference</code> <strong>SHALL</strong> reference the object that directly leads to the task - a particular claim, for example.</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-approach.html#task-reason">task-based-approach.html</a></li></ul></td></tr><tr><td><b><a name="CONF-082"> </a></b>CONF-082</td><td>SHALL</td><td><div><p>Clients <strong>SHALL</strong> support all four profiles.</p>
</div><p>Links: </p><ul><li>References: <a href="StructureDefinition-cdex-task-data-request.html">StructureDefinition-cdex-task-data-request.html</a></li></ul></td></tr><tr><td><b><a name="CONF-083"> </a></b>CONF-083</td><td>SHALL</td><td><div><p>do not define the detailed POU, and the implementer <strong>SHALL</strong> supply an additional, alternate code. The resource fragment below shows their use:</p>
</div><p>Links: </p><ul><li>References: <a href="ValueSet-cdex-POU.html">ValueSet-cdex-POU.html</a></li></ul></td></tr><tr><td><b><a name="CONF-086"> </a></b>CONF-086</td><td>SHALL</td><td><div><p>The CDex Profile elements consist of Mandatory, Must Support, and Optional elements. Elements that are neither Mandatory or Must Support are Optional. Mandatory elements are elements with a minimum cardinality greater than 0. [Must Support] elements are marked with the <em>mustSupport</em> flag and <strong>SHALL</strong> be interpreted as follows:</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-087"> </a></b>CONF-087</td><td>SHALL</td><td><div><p>The CDex Profile elements consist of Mandatory, Must Support, and Optional elements. Elements that are neither Mandatory or Must Support are Optional. Mandatory elements are elements with a minimum cardinality greater than 0. [Must Support] elements are marked with the <em>mustSupport</em> flag and <strong>SHALL</strong> be interpreted as follows:</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-088"> </a></b>CONF-088</td><td>SHALL</td><td><div><p>element is <em>required</em> and the Task Source <strong>SHALL</strong> populating the data element with value unless:</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-089"> </a></b>CONF-089</td><td>SHALL</td><td><div><p>element is <em>required</em> and the Task Source <strong>SHALL</strong> populating the data element with value unless:</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-090"> </a></b>CONF-090</td><td>SHALL</td><td><div><p>Source <strong>SHALL</strong> use that extension to communicate the reason for missing data.</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-091"> </a></b>CONF-091</td><td>SHALL</td><td><div><p>Source <strong>SHALL</strong> use that extension to communicate the reason for missing data.</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-092"> </a></b>CONF-092</td><td>SHALL</td><td><div><ul>
<li>If the minimum cardinality of an element is equal to 0, the Task Source <strong>SHALL</strong> be capable of populating the data element when sharing Task compliant with a CDex profile. Although the system needs to demonstrate it is capable of populating and sharing of the element, it is acceptable to omit the element if the system doesn't have values in a particular instance. A system that is incapable of ever sharing the</li>
</ul>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-093"> </a></b>CONF-093</td><td>SHALL</td><td><div><ul>
<li>If the minimum cardinality of an element is equal to 0, the Task Source <strong>SHALL</strong> be capable of populating the data element when sharing Task compliant with a CDex profile. Although the system needs to demonstrate it is capable of populating and sharing of the element, it is acceptable to omit the element if the system doesn't have values in a particular instance. A system that is incapable of ever sharing the</li>
</ul>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-094"> </a></b>CONF-094</td><td>SHALL</td><td><div><ul>
<li>The Task Consumer <strong>SHALL</strong> be capable of processing Task instances</li>
</ul>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-095"> </a></b>CONF-095</td><td>SHALL</td><td><div><ul>
<li>The Task Consumer <strong>SHALL</strong> be capable of processing Task instances</li>
</ul>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-005"> </a></b>CONF-005</td><td>SHALL NOT</td><td><div><p>The use of CDex <strong>SHALL NOT</strong> be considered compliant with any use case specific IG where CDex is not explicitly required as part of the supported exchanges.</p>
</div><p>Links: </p><ul><li>References: <a href="background.html#where-does-cdex-fit-in-the-da-vinci-project">background.html</a></li></ul></td></tr><tr><td><b><a name="CONF-001"> </a></b>CONF-001</td><td>SHOULD</td><td><div><p>Systems may choose some or all of these capabilities and implement any combination of unsolicited or solicited attachments for prior authorization, claims, or both. Therefore, in contrast to the expectations in the CDex CapabilityStatements, they <strong>SHOULD</strong> define what they support in their local capability statement in one or more of the following ways:</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html#introduction">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-002"> </a></b>CONF-002</td><td>SHOULD</td><td><div><p>|Attachment.Code||{{OK}}(It SHOULD be present when submitting unsolicited attachments)|</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html#submit-attachment-parameters-for-sending-attachments">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-056"> </a></b>CONF-056</td><td>SHOULD</td><td><div><p>The Da Vinci Burden Reduction Implementation Guides (IGs), [Da Vinci Coverage Requirements Discovery (CRD)], [Da Vinci Documentation Templates and Rules (DTR)], and [Da Vinci Prior Authorization Support (PAS)], support an integrated workflow to enable automated submission of required documentation and prior authorization from EHR and payer systems respectively. Although the PAS guide leverages CDex, implementers <strong>SHOULD</strong> follow the Burden Reduction IGs to request additional information for prior authorization. See [Using CDex Attachments with DaVinci PAS] page for more details.</p>
</div><p>Links: </p><ul><li>References: <a href="solicited-unsolicited-attachments.html">solicited-unsolicited-attachments.html</a></li></ul></td></tr><tr><td><b><a name="CONF-062"> </a></b>CONF-062</td><td>SHOULD</td><td><div><p>Data consumers can poll for a single Task or across several Tasks. The polling frequency balances responsiveness (short interval between data creation and consumer notification) against not over-taxing the Data Source's resources. Data Consumers <strong>SHOULD</strong> perform this operation in an automated/background manner after 1 minute to return automated responses and no more than every 5 minutes for the first 30 minutes and no more frequently than once every hour after that.</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-approach.html#polling">task-based-approach.html</a></li></ul></td></tr><tr><td><b><a name="CONF-078"> </a></b>CONF-078</td><td>SHOULD</td><td><div><p>CDex Task-based transactions have many optional capabilities. Systems may choose some or all of these capabilities and implement any combination. Refer to the CDex [CapabilityStatements] resources for conformance expectations for the various actors and roles. In contrast to the expectations in the CDex CapabilityStatements, Systems <strong>SHOULD</strong> define what they support in their local capability statement in one or more of the following ways:</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html#introduction">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-004"> </a></b>CONF-004</td><td>SHOULD-NOT</td><td><div><ul>
<li>An alternative is needed to cover some aspects of an exchange. For example, suppose the provider's data release process does not allow the automatic request for information specified in a use case specific IG. In that case, CDex provides an asynchronous process that allows manual review before releasing the information. However, implementers <strong>SHOULD NOT</strong> use this transaction when there is a requirement for real-time response to facilitate patient care.</li>
</ul>
</div><p>Links: </p><ul><li>References: <a href="background.html#where-does-cdex-fit-in-the-da-vinci-project">background.html</a></li></ul></td></tr><tr><td><b><a name="CONF-096"> </a></b>CONF-096</td><td>SHOULD-NOT</td><td><div><p>data - and receivers <strong>SHOULD NOT</strong> reject instances that contain unexpected data elements if those elements are not [modifier elements]. However, Task Sources cannot rely on Task Consumers to store, process, or do anything other than ignore data that is not marked as <em>mustSupport</em>.</p>
</div><p>Links: </p><ul><li>References: <a href="attachments-conformance.html">attachments-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-097"> </a></b>CONF-097</td><td>SHOULD-NOT</td><td><div><p>data - and receivers <strong>SHOULD NOT</strong> reject instances that contain unexpected data elements if those elements are not [modifier elements]. However, Task Sources cannot rely on Task Consumers to store, process, or do anything other than ignore data that is not marked as <em>mustSupport</em>.</p>
</div><p>Links: </p><ul><li>References: <a href="task-based-conformance.html">task-based-conformance.html</a></li></ul></td></tr><tr><td><b><a name="CONF-017"> </a></b>CONF-017</td><td>MAY</td><td><div><p>&lt;span class=&quot;bg-success&quot; markdown=&quot;1&quot;&gt;CDex Task-based queries enable Data Consumers to dynamically define POUs when requesting data. Data Consumer and Data Source <strong>MAY</strong> communicate the POU for the requested data for each Task using codes from the [CDex Purpose of Use Value Set] in the POU <code>Task.input</code> element. The Data Consumer and Data Source</p>
</div><p>Links: </p><ul><li>References: <a href="security.html#purpose-of-use">security.html</a></li></ul></td></tr></table></div>
  </text>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-wg">
    <valueCode value="claims"/>
  </extension>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm">
    <valueInteger value="2">
      <extension
                 url="http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom">
        <valueCanonical
                        value="http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"/>
      </extension>
    </valueInteger>
  </extension>
  <extension
             url="http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status">
    <valueCode value="trial-use">
      <extension
                 url="http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom">
        <valueCanonical
                        value="http://hl7.org/fhir/us/davinci-cdex/ImplementationGuide/hl7.fhir.us.davinci-cdex"/>
      </extension>
    </valueCode>
  </extension>
  <url
       value="http://hl7.org/fhir/us/davinci-cdex/Requirements/cdex-data-consumer"/>
  <identifier>
    <system value="urn:ietf:rfc:3986"/>
    <value value="urn:oid:2.16.840.1.113883.4.642.40.21.36.1"/>
  </identifier>
  <version value="2.1.0"/>
  <name value="CDexDataConsumerRequirements"/>
  <title value="CDex Data Consumer Requirements"/>
  <status value="draft"/>
  <date value="2026-06-10T20:32:01+00:00"/>
  <publisher
             value="HL7 International / Payer/Provider Information Exchange Work Group"/>
  <contact>
    <name
          value="HL7 International / Payer/Provider Information Exchange Work Group"/>
    <telecom>
      <system value="url"/>
      <value value="http://www.hl7.org/Special/committees/claims"/>
    </telecom>
    <telecom>
      <system value="email"/>
      <value value="pie@lists.hl7.org"/>
    </telecom>
  </contact>
  <description
               value="This [Requirements](https://hl7.org/fhir/R5/requirements.html) resource lists all the CDex Data Consumer requirements defined in the narrative sections of this IG."/>
  <jurisdiction>
    <coding>
      <system value="urn:iso:std:iso:3166"/>
      <code value="US"/>
    </coding>
  </jurisdiction>
  <copyright
             value="Used by permission of HL7 International all rights reserved Creative Commons License"/>
  <statement>
    <key value="CONF-009"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="When signatures are required, the Data Consumer **SHALL** use a [FHIR RESTful search] instead of [FHIR RESTful read]. There is no CDex support for signatures on a FHIR RESTful read because it fetches a single instance of a resource instead of a Bundle. If the Data Consumer attempts to fetch a resource with a read and a signature is required, the Data Source/Responder"/>
    <reference value="direct-query.html#data-sourceresponder-requirements"/>
  </statement>
  <statement>
    <key value="CONF-011"/>
    <conformance value="SHALL"/>
    <requirement
                 value="The [Da Vinci] initiative supports this implementation guide. Da Vinci is a private effort to accelerate the adoption of Health Level Seven International Fast Healthcare Interoperability Resources (HL7® FHIR®) as the standard to support and integrate value-based care (VBC) data exchange across communities. This guide and implementers of it **SHALL** adhere to the [HL7 Da Vinci Guiding Principles] for exchanging patient health information."/>
    <reference value="index.html#about-this-guide"/>
  </statement>
  <statement>
    <key value="CONF-014"/>
    <conformance value="SHALL"/>
    <requirement
                 value="This implementation guide inherits all of the mandatory requirements and recommendations defined in the [HRex Security and Privacy] specification.   Implementers **SHALL** read and adhere to the guidance for the following topics:"/>
    <reference
               value="security.html#da-vinci-hrex-security-and-privacy-requirements"/>
  </statement>
  <statement>
    <key value="CONF-015"/>
    <conformance value="SHALL"/>
    <requirement
                 value="1. User scopes **SHALL** be used as defined in [SMART App Launch] to restrict access to the relevant patients for a given Data Consumer. Organizational user access scopes are typically pre-negotiated and documented via business agreements. Data Sources shall translate these agreements into the appropriate SMART App Launch scopes."/>
    <reference value="security.html#general-considerations"/>
  </statement>
  <statement>
    <key value="CONF-016"/>
    <conformance value="SHALL"/>
    <requirement
                 value="1. Audit mechanisms **SHALL** be in place so that exchange mechanisms *with or without human intervention* can be subject to review/oversight."/>
    <reference value="security.html#general-considerations"/>
  </statement>
  <statement>
    <key value="CONF-018"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="communicate the POU for the requested data for each Task using codes from the [CDex Purpose of Use Value Set] in the POU `Task.input` element. The Data Consumer and Data Source **SHALL** use it to communicate the POU for the requested data when trading partner agreements require the POU to be exchanged.&lt;/span&gt;&lt;!-- new-content --&gt;"/>
    <reference value="security.html#purpose-of-use"/>
  </statement>
  <statement>
    <key value="CONF-057"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="**For CDex Task-based transactions, the [CDex Task Data Request Profile] SHALL be used by the Data Consumer to solicit information from a system.** It represents *both* the data request and the returned data and provides information such as why it needs to be completed, who is to complete it, who is asking for it, when it is due, etc. The Task's status is updated as the task is fulfilled. For a detailed description of all the mandatory, [*must support*], and optional elements, as well as formal definitions and profile views, see the [CDex Task Data Request Profile] page."/>
    <reference value="task-based-approach.html#the-task-resource"/>
  </statement>
  <statement>
    <key value="CONF-058"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="When known, `Task.reasonCode` or `Task.reasonReference` **SHALL** reference the object that directly leads to the task - a particular claim, for example."/>
    <reference value="task-based-approach.html#task-reason"/>
  </statement>
  <statement>
    <key value="CONF-082"/>
    <conformance value="SHALL"/>
    <requirement value="Clients **SHALL** support all four profiles."/>
    <reference value="StructureDefinition-cdex-task-data-request.html"/>
  </statement>
  <statement>
    <key value="CONF-083"/>
    <conformance value="SHALL"/>
    <requirement
                 value="do not define the detailed POU, and the implementer **SHALL** supply an additional, alternate code. The resource fragment below shows their use:"/>
    <reference value="ValueSet-cdex-POU.html"/>
  </statement>
  <statement>
    <key value="CONF-086"/>
    <conformance value="SHALL"/>
    <requirement
                 value="The CDex Profile elements consist of Mandatory, Must Support, and Optional elements. Elements that are neither Mandatory or Must Support are Optional. Mandatory elements are elements with a minimum cardinality greater than 0. [Must Support] elements are marked with the *mustSupport* flag and **SHALL** be interpreted as follows:"/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-087"/>
    <conformance value="SHALL"/>
    <requirement
                 value="The CDex Profile elements consist of Mandatory, Must Support, and Optional elements. Elements that are neither Mandatory or Must Support are Optional. Mandatory elements are elements with a minimum cardinality greater than 0. [Must Support] elements are marked with the *mustSupport* flag and **SHALL** be interpreted as follows:"/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-088"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="element is *required* and the Task Source **SHALL** populating the data element with value unless:"/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-089"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="element is *required* and the Task Source **SHALL** populating the data element with value unless:"/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-090"/>
    <conformance value="SHALL"/>
    <requirement
                 value="Source **SHALL** use that extension to communicate the reason for missing data."/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-091"/>
    <conformance value="SHALL"/>
    <requirement
                 value="Source **SHALL** use that extension to communicate the reason for missing data."/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-092"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="- If the minimum cardinality of an element is equal to 0, the Task Source **SHALL** be capable of populating the data element when sharing Task compliant with a CDex profile. Although the system needs to demonstrate it is capable of populating and sharing of the element, it is acceptable to omit the element if the system doesn't have values in a particular instance. A system that is incapable of ever sharing the"/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-093"/>
    <conformance value="SHALL"/>
    <conditionality value="true"/>
    <requirement
                 value="- If the minimum cardinality of an element is equal to 0, the Task Source **SHALL** be capable of populating the data element when sharing Task compliant with a CDex profile. Although the system needs to demonstrate it is capable of populating and sharing of the element, it is acceptable to omit the element if the system doesn't have values in a particular instance. A system that is incapable of ever sharing the"/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-094"/>
    <conformance value="SHALL"/>
    <requirement
                 value="- The Task Consumer **SHALL** be capable of processing Task instances"/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-095"/>
    <conformance value="SHALL"/>
    <requirement
                 value="- The Task Consumer **SHALL** be capable of processing Task instances"/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <extension
               url="http://hl7.org/fhir/tools/StructureDefinition/requirements-statementshallnot">
      <valueBoolean value="true"/>
    </extension>
    <key value="CONF-005"/>
    <conditionality value="true"/>
    <requirement
                 value="The use of CDex **SHALL NOT** be considered compliant with any use case specific IG where CDex is not explicitly required as part of the supported exchanges."/>
    <reference
               value="background.html#where-does-cdex-fit-in-the-da-vinci-project"/>
  </statement>
  <statement>
    <key value="CONF-001"/>
    <conformance value="SHOULD"/>
    <requirement
                 value="Systems may choose some or all of these capabilities and implement any combination of unsolicited or solicited attachments for prior authorization, claims, or both. Therefore, in contrast to the expectations in the CDex CapabilityStatements, they **SHOULD** define what they support in their local capability statement in one or more of the following ways:"/>
    <reference value="attachments-conformance.html#introduction"/>
  </statement>
  <statement>
    <key value="CONF-002"/>
    <conformance value="SHOULD"/>
    <conditionality value="true"/>
    <requirement
                 value="|Attachment.Code||{{OK}}(It SHOULD be present when submitting unsolicited attachments)|"/>
    <reference
               value="attachments-conformance.html#submit-attachment-parameters-for-sending-attachments"/>
  </statement>
  <statement>
    <key value="CONF-056"/>
    <conformance value="SHOULD"/>
    <requirement
                 value="The Da Vinci Burden Reduction Implementation Guides (IGs), [Da Vinci Coverage Requirements Discovery (CRD)], [Da Vinci Documentation Templates and Rules (DTR)], and [Da Vinci Prior Authorization Support (PAS)], support an integrated workflow to enable automated submission of required documentation and prior authorization from EHR and payer systems respectively. Although the PAS guide leverages CDex, implementers **SHOULD** follow the Burden Reduction IGs to request additional information for prior authorization. See [Using CDex Attachments with DaVinci PAS] page for more details."/>
    <reference value="solicited-unsolicited-attachments.html"/>
  </statement>
  <statement>
    <key value="CONF-062"/>
    <conformance value="SHOULD"/>
    <requirement
                 value="Data consumers can poll for a single Task or across several Tasks. The polling frequency balances responsiveness (short interval between data creation and consumer notification) against not over-taxing the Data Source's resources. Data Consumers **SHOULD** perform this operation in an automated/background manner after 1 minute to return automated responses and no more than every 5 minutes for the first 30 minutes and no more frequently than once every hour after that."/>
    <reference value="task-based-approach.html#polling"/>
  </statement>
  <statement>
    <key value="CONF-078"/>
    <conformance value="SHOULD"/>
    <requirement
                 value="CDex Task-based transactions have many optional capabilities. Systems may choose some or all of these capabilities and implement any combination. Refer to the CDex [CapabilityStatements] resources for conformance expectations for the various actors and roles. In contrast to the expectations in the CDex CapabilityStatements, Systems **SHOULD** define what they support in their local capability statement in one or more of the following ways:"/>
    <reference value="task-based-conformance.html#introduction"/>
  </statement>
  <statement>
    <key value="CONF-004"/>
    <conformance value="SHOULD-NOT"/>
    <conditionality value="true"/>
    <requirement
                 value="- An alternative is needed to cover some aspects of an exchange. For example, suppose the provider's data release process does not allow the automatic request for information specified in a use case specific IG. In that case, CDex provides an asynchronous process that allows manual review before releasing the information. However, implementers **SHOULD NOT** use this transaction when there is a requirement for real-time response to facilitate patient care."/>
    <reference
               value="background.html#where-does-cdex-fit-in-the-da-vinci-project"/>
  </statement>
  <statement>
    <key value="CONF-096"/>
    <conformance value="SHOULD-NOT"/>
    <conditionality value="true"/>
    <requirement
                 value="data - and receivers **SHOULD NOT** reject instances that contain unexpected data elements if those elements are not [modifier elements]. However, Task Sources cannot rely on Task Consumers to store, process, or do anything other than ignore data that is not marked as *mustSupport*."/>
    <reference value="attachments-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-097"/>
    <conformance value="SHOULD-NOT"/>
    <conditionality value="true"/>
    <requirement
                 value="data - and receivers **SHOULD NOT** reject instances that contain unexpected data elements if those elements are not [modifier elements]. However, Task Sources cannot rely on Task Consumers to store, process, or do anything other than ignore data that is not marked as *mustSupport*."/>
    <reference value="task-based-conformance.html"/>
  </statement>
  <statement>
    <key value="CONF-017"/>
    <conformance value="MAY"/>
    <conditionality value="true"/>
    <requirement
                 value="&lt;span class=&quot;bg-success&quot; markdown=&quot;1&quot;&gt;CDex Task-based queries enable Data Consumers to dynamically define POUs when requesting data. Data Consumer and Data Source **MAY** communicate the POU for the requested data for each Task using codes from the [CDex Purpose of Use Value Set] in the POU `Task.input` element. The Data Consumer and Data Source"/>
    <reference value="security.html#purpose-of-use"/>
  </statement>
</Requirements>