Making Electronic Data More available for Research and Public Health (MedMorph)
1.0.0 - STU 1

Making Electronic Data More available for Research and Public Health (MedMorph), published by HL7 International - Public Health Work Group. This is not an authorized publication; it is the continuous build for version 1.0.0). This version is based on the current content of https://github.com/HL7/fhir-medmorph/ and changes regularly. See the Directory of published versions

## CapabilityStatement: Trust Service Provider

Official URL: http://hl7.org/fhir/us/medmorph/CapabilityStatement/medmorph-trust-service-provider | Version: 1.0.0
Draft as of 2020-12-06 | Computable Name: TrustServiceProvider

This CapabilityStatement defines the expected capabilities of the Trust Service Provider actor when conforming to the MedMorph RA IG. This actor is responsible for providing trust services. (e.g., Pseudonymization, Anonymization, De-identification, Re-identification).

Raw OpenAPI-Swagger Definition file | Download

## TrustServiceProvider

(Requirements Definition Capability Statement)

Canonical URL: http://hl7.org/fhir/us/medmorph/CapabilityStatement/medmorph-trust-service-provider

Published by: HL7 International - Public Health Work Group

This CapabilityStatement defines the expected capabilities of the Trust Service Provider actor when conforming to the MedMorph RA IG. This actor is responsible for providing trust services. (e.g., Pseudonymization, Anonymization, De-identification, Re-identification).

## General

FHIR Version: | 4.0.1
Supported formats: | json

## REST behavior

The primary focus of the Trust Service Provider is to provide trust services which include Pseudonymization, Anonymization, De-identification and Re-identification. For additional reading material on trust services, refer to [Trust Service Requirements](trustservices.html).

Security:

Implementations must meet the general security requirements documented in FHIR Security guidance.

In addition the Trust Service Provider needs to meet the security requirements as outlined in the Formal Specification - Security Section.

### FHIR Operations summary

The following FHIR operations SHALL be supported by the Trust Service Provider.

- Bundle pseudonymize
- Bundle anonymize
- Bundle de-identify
- Bundle re-identify
- Bundle hash