{"action":"E","agent":[{"location":{"reference":"Location/1"},"networkString":"custodian.net","requestor":true,"who":{"reference":"Practitioner/f001"}}],"authorization":[{"coding":[{"code":"ETREAT","display":"Emergency Treatment","system":"http://terminology.hl7.org/CodeSystem/v3-ActReason"}]}],"entity":[{"role":{"coding":[{"code":"1","display":"Patient","system":"http://terminology.hl7.org/CodeSystem/object-role"}]},"what":{"reference":"Patient/example"}}],"id":"example-breakglass-start","outcome":{"code":{"code":"0","display":"Success","system":"http://terminology.hl7.org/CodeSystem/audit-event-outcome"},"detail":[{"text":"Successful  Start of Break-Glass"}]},"recorded":"2013-09-22T00:08:00Z","resourceType":"AuditEvent","source":{"observer":{"display":"Watchers Accounting of Disclosures Application"},"type":[{"coding":[{"code":"4","display":"Application Server","system":"http://terminology.hl7.org/CodeSystem/security-source-type"}]}]},"subtype":[{"coding":[{"code":"110127","display":"Emergency Override Started","system":"http://dicom.nema.org/resources/ontology/DCM"}]}],"text":{"div":"<div xmlns=\"http://www.w3.org/1999/xhtml\">Authorized Break-Glass period has been declared to enable immediate emergent treatment condition. This AuditEvent indicates the start of the Break-Glass event. Another would indicate the stop of that Break-Glass period, provided there is a session or state that can detect the end of the break-glass event.</div>","status":"generated"},"type":{"coding":[{"code":"110113","display":"Security Alert","system":"http://dicom.nema.org/resources/ontology/DCM"}]}}