Da Vinci Payer Data Exchange, published by HL7 International / Financial Management. This guide is not an authorized publication; it is the continuous build for version 2.2.1 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/davinci-epdx/ and changes regularly. See the Directory of published versions
| Official URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-consent | Version: 2.2.1 | |||
| Standards status: Draft | Maturity Level: 0 | Computable Name: PDexProviderSharingConsent | ||
| Other Identifiers: OID:2.16.840.1.113883.4.642.40.8.42.45 | ||||
Copyright/Legal: Used by permission of HL7 International, all rights reserved Creative Commons License |
||||
The PDex Provider Access Consent Profile enables a member to express their preference for the sharing of their healthcare information to providers through the Provider Access API. A member has to actively choose to opt-out of sharing their data. The opt-out may be exercised by the patient or by the patient's legally recognized personal representative (e.g., parent, guardian, or healthcare proxy), consistent with CMS-0057-F and HIPAA.
The CMS Prior Authorization Rule (CMS-0057) requires that a health plan enables a member to choose to opt-out of sharing their data with providers via the Provider Access API. By default a member is opted-in to data sharing with Providers that have an existing, or impending treatment relationship. This implementation Guide provides a Consent profile that expresses a Member's decision to opt-out, i.e., Deny sharing of their data, A Member can also revoke that denial.
Usages:
You can also check for usages in the FHIR IG Statistics
Description of Profiles, Differentials, Snapshots and how the different presentations work.
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() |
|---|---|---|---|---|
![]() |
C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5 |
![]() ![]() |
0..1 | uri | A set of rules under which this content was created | |
![]() ![]() |
0..* | Extension | Extensions that cannot be ignored | |
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent. Fixed Value: active (no extensions allowed) | |
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: | |
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |
![]() ![]() |
C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples. Required Pattern: |
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() |
1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent. | |
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |
![]() ![]() ![]() ![]() |
C | 1..1 | dateTime | Starting time with inclusive boundary |
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |
Documentation for this format | ||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std. |
| Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std. |
| Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:disclosure | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:apiPurpose | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor:source.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
| Id | Grade | Path(s) | Description | Expression |
This structure is derived from Consent
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() |
|---|---|---|---|---|
![]() |
0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time | |
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Fixed Value: active (no extensions allowed) | |
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Required Pattern: | |
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Required Pattern: | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Required Pattern: | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |
![]() ![]() |
0..1 | CodeableConcept | Regulation that this consents to Required Pattern: | |
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |
![]() ![]() ![]() |
1..1 | code | deny | permit | |
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |
![]() ![]() ![]() ![]() |
1..1 | dateTime | Starting time with inclusive boundary | |
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Required Pattern: | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |
Documentation for this format | ||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() | ||||
|---|---|---|---|---|---|---|---|---|
![]() |
C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5 | ||||
![]() ![]() |
0..1 | id | Logical id of this artifact | |||||
![]() ![]() |
0..1 | Meta | Metadata about the resource | |||||
![]() ![]() |
0..1 | uri | A set of rules under which this content was created | |||||
![]() ![]() |
0..1 | code | Language of the resource content Binding: CommonLanguages (preferred): A human language.
| |||||
![]() ![]() |
0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements | |||||
![]() ![]() |
0..* | Resource | Contained, inline Resources | |||||
![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() |
0..* | Extension | Extensions that cannot be ignored | |||||
![]() ![]() |
0..* | Identifier | Identifier for this record (external references) Example General: {"system":"http://acme.org/identifier/local/eCMS","value":"Local eCMS identifier"} | |||||
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent. Fixed Value: active (no extensions allowed) | |||||
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: | |||||
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |||||
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |||||
![]() ![]() |
0..1 | dateTime | When this Consent was created or indexed | |||||
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |||||
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |||||
![]() ![]() |
0..1 | Source from which this consent is taken | ||||||
![]() ![]() ![]() |
Attachment | |||||||
![]() ![]() ![]() |
Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) | |||||||
![]() ![]() |
0..* | BackboneElement | Policies covered by this consent | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
C | 0..1 | uri | Enforcement source for policy | ||||
![]() ![]() ![]() |
C | 0..1 | uri | Specific policy covered by this consent | ||||
![]() ![]() |
C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples. Required Pattern: | ||||
![]() ![]() |
0..* | BackboneElement | Consent Verified by patient or family | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
1..1 | boolean | Has been verified | |||||
![]() ![]() ![]() |
0..1 | Reference(Patient | RelatedPerson) | Person who verified | |||||
![]() ![]() ![]() |
0..1 | dateTime | When consent verified | |||||
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent. | |||||
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |||||
![]() ![]() ![]() ![]() |
C | 1..1 | dateTime | Starting time with inclusive boundary | ||||
![]() ![]() ![]() ![]() |
C | 0..1 | dateTime | End time with inclusive boundary, if not ongoing | ||||
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |||||
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||||||
![]() ![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role) | |||||
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |||||
![]() ![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |||||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |||||
![]() ![]() ![]() ![]() |
0..* | Coding | Code defined by a terminology system | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Plain text representation of the concept | |||||
![]() ![]() ![]() |
0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System. | |||||
![]() ![]() ![]() |
0..* | Coding | Context of activities covered by this rule Binding: PurposeOfUse (3.1.0) (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels. | |||||
![]() ![]() ![]() |
0..* | Coding | e.g. Resource Type, Profile, CDA, etc. Binding: ConsentContentClass (extensible): The class (type) of information a consent rule covers. | |||||
![]() ![]() ![]() |
0..* | CodeableConcept | e.g. LOINC or SNOMED CT code, etc. in the content Binding: ConsentContentCodes (example): If this code is found in an instance, then the exception applies. | |||||
![]() ![]() ![]() |
0..1 | Period | Timeframe for data controlled by this rule | |||||
![]() ![]() ![]() |
0..* | BackboneElement | Data controlled by this rule | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() |
1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions. | |||||
![]() ![]() ![]() ![]() |
1..1 | Reference(Resource) | The actual data reference | |||||
![]() ![]() ![]() |
0..* | See provision (Consent) | Nested Exception Rules | |||||
Documentation for this format | ||||||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.language | Base | preferred | Common Languages | 📍4.0.1 | FHIR Std. |
| Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std. |
| Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std. |
| Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:disclosure | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:apiPurpose | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor:source.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
| Consent.provision.securityLabel | Base | extensible | SecurityLabels | 📍4.0.1 | FHIR Std. |
| Consent.provision.purpose | Base | extensible | PurposeOfUse | 📍3.1.0 | THO v7.2 |
| Consent.provision.class | Base | extensible | Consent Content Class | 📍4.0.1 | FHIR Std. |
| Consent.provision.code | Base | example | Consent Content Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.data.meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std. |
| Id | Grade | Path(s) | Description | Expression |
This structure is derived from Consent
Summary
Mandatory: 12 elements
Must-Support: 16 elements
Fixed: 1 element
Structures
This structure refers to these other structures:
Extensions
This structure refers to these extensions:
Slices
This structure defines the following Slices:
Maturity: 0
Key Elements View
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() |
|---|---|---|---|---|
![]() |
C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5 |
![]() ![]() |
0..1 | uri | A set of rules under which this content was created | |
![]() ![]() |
0..* | Extension | Extensions that cannot be ignored | |
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent. Fixed Value: active (no extensions allowed) | |
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: | |
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |
![]() ![]() |
C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples. Required Pattern: |
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() |
1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent. | |
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |
![]() ![]() ![]() ![]() |
C | 1..1 | dateTime | Starting time with inclusive boundary |
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |
Documentation for this format | ||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std. |
| Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std. |
| Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:disclosure | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:apiPurpose | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor:source.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
| Id | Grade | Path(s) | Description | Expression |
Differential View
This structure is derived from Consent
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() |
|---|---|---|---|---|
![]() |
0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time | |
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Fixed Value: active (no extensions allowed) | |
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Required Pattern: | |
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Required Pattern: | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Required Pattern: | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |
![]() ![]() |
0..1 | CodeableConcept | Regulation that this consents to Required Pattern: | |
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |
![]() ![]() ![]() |
1..1 | code | deny | permit | |
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |
![]() ![]() ![]() ![]() |
1..1 | dateTime | Starting time with inclusive boundary | |
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Required Pattern: | |
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |
Documentation for this format | ||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
Snapshot View
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() | ||||
|---|---|---|---|---|---|---|---|---|
![]() |
C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5 | ||||
![]() ![]() |
0..1 | id | Logical id of this artifact | |||||
![]() ![]() |
0..1 | Meta | Metadata about the resource | |||||
![]() ![]() |
0..1 | uri | A set of rules under which this content was created | |||||
![]() ![]() |
0..1 | code | Language of the resource content Binding: CommonLanguages (preferred): A human language.
| |||||
![]() ![]() |
0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements | |||||
![]() ![]() |
0..* | Resource | Contained, inline Resources | |||||
![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() |
0..* | Extension | Extensions that cannot be ignored | |||||
![]() ![]() |
0..* | Identifier | Identifier for this record (external references) Example General: {"system":"http://acme.org/identifier/local/eCMS","value":"Local eCMS identifier"} | |||||
![]() ![]() |
1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent. Fixed Value: active (no extensions allowed) | |||||
![]() ![]() |
1..1 | CodeableConcept | Information-disclosure scope (fixed to patient-privacy) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: | |||||
![]() ![]() |
2..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Slice: Unordered, Open by pattern:$this Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Identifies this Consent as applying to the Provider Access API Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement. Required Pattern: | |||||
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0)) | Who the consent applies to | |||||
![]() ![]() |
0..1 | dateTime | When this Consent was created or indexed | |||||
![]() ![]() |
1..1 | Reference(US Core Patient Profile(7.0.0) | US Core RelatedPerson Profile(7.0.0)) | Who is agreeing to the policy and rules | |||||
![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Custodian of the consent | |||||
![]() ![]() |
0..1 | Source from which this consent is taken | ||||||
![]() ![]() ![]() |
Attachment | |||||||
![]() ![]() ![]() |
Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) | |||||||
![]() ![]() |
0..* | BackboneElement | Policies covered by this consent | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
C | 0..1 | uri | Enforcement source for policy | ||||
![]() ![]() ![]() |
C | 0..1 | uri | Specific policy covered by this consent | ||||
![]() ![]() |
C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples. Required Pattern: | ||||
![]() ![]() |
0..* | BackboneElement | Consent Verified by patient or family | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
1..1 | boolean | Has been verified | |||||
![]() ![]() ![]() |
0..1 | Reference(Patient | RelatedPerson) | Person who verified | |||||
![]() ![]() ![]() |
0..1 | dateTime | When consent verified | |||||
![]() ![]() |
1..1 | BackboneElement | Constraints to the base Consent.policyRule | |||||
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() |
1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent. | |||||
![]() ![]() ![]() |
1..1 | Period | Timeframe for this rule | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |||||
![]() ![]() ![]() ![]() |
C | 1..1 | dateTime | Starting time with inclusive boundary | ||||
![]() ![]() ![]() ![]() |
C | 0..1 | dateTime | End time with inclusive boundary, if not ongoing | ||||
![]() ![]() ![]() |
1..* | BackboneElement | Who|what controlled by this rule (or group, by role) Slice: Unordered, Open by pattern:role | |||||
![]() ![]() ![]() ![]() |
Content/Rules for all slices | |||||||
![]() ![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role) | |||||
![]() ![]() ![]() ![]() |
1..* | BackboneElement | Authorized or Not to disclose | |||||
![]() ![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: | |||||
![]() ![]() ![]() ![]() ![]() |
1..1 | Reference(HRex Organization Profile(1.2.0)) | Resource for the actor (or group, by role) | |||||
![]() ![]() ![]() |
1..1 | CodeableConcept | Action permitted or denied - use 'disclose' with provision.type='deny' for Provider Access opt-out Binding: ConsentActionCodes (required) | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |||||
![]() ![]() ![]() ![]() ![]() |
0..1 | boolean | Indicates this action applies to Provider Access API URL: http://hl7.org/fhir/us/davinci-pdex/StructureDefinition/pdex-provider-access-use-case | |||||
![]() ![]() ![]() ![]() |
0..* | Coding | Code defined by a terminology system | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Plain text representation of the concept | |||||
![]() ![]() ![]() |
0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System. | |||||
![]() ![]() ![]() |
0..* | Coding | Context of activities covered by this rule Binding: PurposeOfUse (3.1.0) (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels. | |||||
![]() ![]() ![]() |
0..* | Coding | e.g. Resource Type, Profile, CDA, etc. Binding: ConsentContentClass (extensible): The class (type) of information a consent rule covers. | |||||
![]() ![]() ![]() |
0..* | CodeableConcept | e.g. LOINC or SNOMED CT code, etc. in the content Binding: ConsentContentCodes (example): If this code is found in an instance, then the exception applies. | |||||
![]() ![]() ![]() |
0..1 | Period | Timeframe for data controlled by this rule | |||||
![]() ![]() ![]() |
0..* | BackboneElement | Data controlled by this rule | |||||
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations | |||||
![]() ![]() ![]() ![]() |
0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||
![]() ![]() ![]() ![]() |
1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions. | |||||
![]() ![]() ![]() ![]() |
1..1 | Reference(Resource) | The actual data reference | |||||
![]() ![]() ![]() |
0..* | See provision (Consent) | Nested Exception Rules | |||||
Documentation for this format | ||||||||
| Path | Status | Usage | ValueSet | Version | Source |
| Consent.language | Base | preferred | Common Languages | 📍4.0.1 | FHIR Std. |
| Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std. |
| Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std. |
| Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:disclosure | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.category:apiPurpose | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std. |
| Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.actor:source.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std. |
| Consent.provision.action | Base | required | Consent Action Codes | 📦4.0.1 | FHIR Std. |
| Consent.provision.securityLabel | Base | extensible | SecurityLabels | 📍4.0.1 | FHIR Std. |
| Consent.provision.purpose | Base | extensible | PurposeOfUse | 📍3.1.0 | THO v7.2 |
| Consent.provision.class | Base | extensible | Consent Content Class | 📍4.0.1 | FHIR Std. |
| Consent.provision.code | Base | example | Consent Content Codes | 📍4.0.1 | FHIR Std. |
| Consent.provision.data.meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std. |
| Id | Grade | Path(s) | Description | Expression |
This structure is derived from Consent
Summary
Mandatory: 12 elements
Must-Support: 16 elements
Fixed: 1 element
Structures
This structure refers to these other structures:
Extensions
This structure refers to these extensions:
Slices
This structure defines the following Slices:
Maturity: 0
Other representations of profile: CSV, Excel, Schematron