HL7 FHIR Implementation Guide: Data Access Policies
1.0.0-current - ci-build International flag

HL7 FHIR Implementation Guide: Data Access Policies, published by HL7 International / Security. This guide is not an authorized publication; it is the continuous build for version 1.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/data-access-policies/ and changes regularly. See the Directory of published versions

: Example of a SearchSet Bundle with Permission - XML Representation

Raw xml | Download



<Bundle xmlns="http://hl7.org/fhir">
  <id value="ex-SearchSet-withPermission"/>
  <meta>
    <profile
             value="http://hl7.org/fhir/uv/dap/StructureDefinition/dap.bundleWithPermission"/>
    <security>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
      <code value="HTEST"/>
    </security>
    <security>
      <extension
                 url="http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionImposedOnBundle">
        <valueReference>
          <reference
                     value="http://test.fhir.net/R4/fhir/Permission/in-permission-redisclose-forbidden-without-consent"/>
        </valueReference>
      </extension>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
      <code value="CPLYPOL"/>
    </security>
  </meta>
  <type value="searchset"/>
  <timestamp value="2023-11-22T09:32:24Z"/>
  <total value="2"/>
  <link>
    <relation value="self"/>
    <url
         value="http://test.fhir.net/R4/fhir/Observation?patient=9876&amp;status=current"/>
  </link>
  <entry>
    <fullUrl value="http://test.fhir.net/R4/fhir/Observation/in-Observation"/>
    <resource>
      <Observation>
        <id value="in-Observation"/>
        <meta>
          <security>
            <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
            <code value="ETH"/>
          </security>
          <security>
            <system
                    value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/>
            <code value="R"/>
          </security>
        </meta>
        <text>
          <status value="generated"/>
          <div xmlns="http://www.w3.org/1999/xhtml"><a name="Observation_in-Observation"> </a><p class="res-header-id"><b>Generated Narrative: Observation in-Observation</b></p><a name="in-Observation"> </a><a name="hcin-Observation"> </a><a name="in-Observation-en-US"> </a><p><b>status</b>: Final</p><p><b>code</b>: <span title="Codes:{http://loinc.org 74013-4}">Alcoholic drinks per day</span></p><p><b>subject</b>: <a href="Patient-ex-patient.html">John Schmidt  Other, DoB: 1923-07-25</a></p><p><b>effective</b>: 2022-06-13</p><p><b>performer</b>: <a href="Patient-ex-patient.html">John Schmidt  Other, DoB: 1923-07-25</a></p><p><b>value</b>: 5 wine glasses per day<span style="background: LightGoldenRodYellow"> (Details: UCUM  code/d = '/d')</span></p></div>
        </text>
        <status value="final"/>
        <code>
          <coding>
            <system value="http://loinc.org"/>
            <code value="74013-4"/>
          </coding>
        </code>
        <subject>🔗 
          <reference value="Patient/ex-patient"/>
        </subject>
        <effectiveDateTime value="2022-06-13"/>
        <performer>🔗 
          <reference value="Patient/ex-patient"/>
        </performer>
        <valueQuantity>
          <value value="5"/>
          <unit value="wine glasses per day"/>
          <system value="http://unitsofmeasure.org"/>
          <code value="/d"/>
        </valueQuantity>
      </Observation>
    </resource>
    <search>
      <mode value="match"/>
    </search>
  </entry>
  <entry>
    <fullUrl
             value="http://test.fhir.net/R4/fhir/Permission/in-permission-redisclose-forbidden-without-consent"/>
    <resource>
      <Permission>
        <id value="in-permission-redisclose-forbidden-without-consent"/>
        <meta>
          <security>
            <system
                    value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
            <code value="HTEST"/>
          </security>
        </meta>
        <text>
          <status value="generated"/>
          <div xmlns="http://www.w3.org/1999/xhtml"><a name="Permission_in-permission-redisclose-forbidden-without-consent"> </a><p class="res-header-id"><b>Generated Narrative: Permission in-permission-redisclose-forbidden-without-consent</b></p><a name="in-permission-redisclose-forbidden-without-consent"> </a><a name="hcin-permission-redisclose-forbidden-without-consent"> </a><a name="in-permission-redisclose-forbidden-without-consent-en-US"> </a><p><b>status</b>: Active</p><p><b>asserter</b>: <a href="Organization-ex-organization.html">Organization nowhere</a></p><p><b>date</b>: 2023-11-22</p><p><b>combining</b>: Deny-unless-permit</p><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>activity</b></p><p><b>purpose</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason TREAT}">treatment</span>, <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HPAYMT}">healthcare payment</span>, <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HOPERAT}">healthcare operations</span></p></blockquote><p><b>limit</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode NODSCLCDS}">no disclosure without information subject's consent directive</span></p></blockquote></div>
        </text>
        <status value="active"/>
        <asserter>🔗 
          <reference value="Organization/ex-organization"/>
        </asserter>
        <date value="2023-11-22"/>
        <combining value="deny-unless-permit"/>
        <rule>
          <type value="permit"/>
          <activity>
            <purpose>
              <coding>
                <system
                        value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
                <code value="TREAT"/>
              </coding>
            </purpose>
            <purpose>
              <coding>
                <system
                        value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
                <code value="HPAYMT"/>
              </coding>
            </purpose>
            <purpose>
              <coding>
                <system
                        value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
                <code value="HOPERAT"/>
              </coding>
            </purpose>
          </activity>
          <limit>
            <coding>
              <system
                      value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
              <code value="NODSCLCDS"/>
              <display
                       value="no disclosure without information subject's consent directive"/>
            </coding>
          </limit>
        </rule>
      </Permission>
    </resource>
    <search>
      <mode value="include"/>
    </search>
  </entry>
</Bundle>