HL7 FHIR Implementation Guide: Data Access Policies
1.0.0-current - ci-build International flag

HL7 FHIR Implementation Guide: Data Access Policies, published by HL7 International / Security. This guide is not an authorized publication; it is the continuous build for version 1.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/data-access-policies/ and changes regularly. See the Directory of published versions

: A Permission with all the Patient Directory rules - JSON Representation

Page standards status: Informative

Raw json | Download

{
  "resourceType" : "Permission",
  "id" : "ex-permission-patient-directory-all",
  "meta" : {
    "security" : [
      {
        "system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
        "code" : "HTEST"
      }
    ]
  },
  "text" : {
    "status" : "extensions",
    "div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: Permission ex-permission-patient-directory-all</b></p><a name=\"ex-permission-patient-directory-all\"> </a><a name=\"hcex-permission-patient-directory-all\"> </a><a name=\"ex-permission-patient-directory-all-en-US\"> </a><p><b>status</b>: Active</p><p><b>asserter</b>: <a href=\"Organization-ex-organization.html\">Organization nowhere</a></p><p><b>date</b>: 2023-11-22</p><p><b>combining</b>: Deny-unless-permit</p><blockquote><p><b>rule</b></p><p><b>Tagged data elements to be excluded on Permit</b>: <a href=\"http://terminology.hl7.org/6.1.0/CodeSystem-v3-ActCode.html#v3-ActCode-REL\">ActCode REL</a>: religion information sensitivity</p><p><b>type</b>: Permit</p><blockquote><p><b>activity</b></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action E}\">Execute</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HDIRECT}\">directory</span>, <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason PATRQT}\">patient requested</span>, <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason FAMRQT}\">family requested</span></p></blockquote><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode NOAUTH}\">no disclosure without subject authorization</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>activity</b></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action C}\">Create</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action U}\">Update</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action D}\">Delete</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action E}\">Execute</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HSYSADMIN}\">health system administration</span></p></blockquote></blockquote></div>"
  },
  "status" : "active",
  "asserter" : {
    🔗 "reference" : "Organization/ex-organization"
  },
  "date" : [
    "2023-11-22"
  ],
  "combining" : "deny-unless-permit",
  "rule" : [
    {
      "modifierExtension" : [
        {
          "url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.excludeTagged",
          "valueCoding" : {
            "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
            "code" : "REL"
          }
        }
      ],
      "type" : "permit",
      "activity" : [
        {
          "action" : [
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "R"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "E"
                }
              ]
            }
          ],
          "purpose" : [
            {
              "coding" : [
                {
                  "system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
                  "code" : "HDIRECT"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
                  "code" : "PATRQT"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
                  "code" : "FAMRQT"
                }
              ]
            }
          ]
        }
      ],
      "limit" : [
        {
          "coding" : [
            {
              "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
              "code" : "NOAUTH"
            }
          ]
        }
      ]
    },
    {
      "type" : "permit",
      "activity" : [
        {
          "action" : [
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "C"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "R"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "U"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "D"
                }
              ]
            },
            {
              "coding" : [
                {
                  "system" : "http://hl7.org/fhir/audit-event-action",
                  "code" : "E"
                }
              ]
            }
          ],
          "purpose" : [
            {
              "coding" : [
                {
                  "system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
                  "code" : "HSYSADMIN"
                }
              ]
            }
          ]
        }
      ]
    }
  ]
}