<?xml version="1.0" encoding="UTF-8"?><Consent xmlns="http://hl7.org/fhir">
  <id value="consent-example-Out"/>
  <meta>
    <security>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
      <code value="HTEST"/>
      <display value="test health data"/>
    </security>
  </meta>
  <text>
    <status value="generated"/><div xmlns="http://www.w3.org/1999/xhtml">
      <p>The following scenario is based on existing jurisdictional policy and are realized in existing systems in Canada. 
	    The default policy is one of implied consent for the provision of care, so these scenarios all deal with withdrawal or withholding consent for that purpose. 
      Withhold Authorization of sharing data for Treatment
      </p>
      <p>
    Patient "P. van de Heuvel" wishes to have no data at the Burgers University Medical Center available for normal treatment use.
      </p>
    </div>
  </text>
  <status value="active"/>
  <category>
    <coding>
      <system value="http://loinc.org"/>
      <code value="59284-0"/>
    </coding>
  </category>
  <subject>
    <reference value="Patient/f001"/>
    <display value="P. van de Heuvel"/>
  </subject>
  <date value="2018-12-28"/>
  <controller>
    <reference value="Organization/f001"/>
  </controller>
  <!--  likely use url pointer to common text  -->
  <sourceAttachment>
    <title value="The terms of the consent in lawyer speak."/>
  </sourceAttachment>
  <!--  this is opt-IN - e.g. everything approved unless otherwise stated  -->
  <regulatoryBasis>
    <coding>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
      <code value="INFA"/>
    </coding>
  </regulatoryBasis>
  <decision value="permit"/>
  <provision>
    <actor>
      <role>
        <coding>
          <system value="http://terminology.hl7.org/CodeSystem/v3-ParticipationType"/>
          <code value="CST"/>
        </coding>
      </role>
      <reference>
        <reference value="Organization/f001"/>
      </reference>
    </actor>
  </provision>
</Consent>