Da Vinci Payer Data Exchange, published by HL7 International / Financial Management. This guide is not an authorized publication; it is the continuous build for version 2.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/davinci-epdx/ and changes regularly. See the Directory of published versions

Security and Privacy

Previous Page - Introduction

The PDex IG adopts the Security and Privacy approach detailed in the Health Record Exchange (HRex) IG. Implementers should also take note of the guidance in the FHIR R4 specification on the HL7 core security page. The Security and Privacy section of the HRex IG addresses:

• Statutes, Regulations, and Guiding Principles
• FHIR Clinical Safety, Security and Implementation Guidance
• Security/Privacy Related Technologies Including Explicit Consent and Security Labels
• Exchange Security
• Additionally Protected Information
• Security Contexts for Da Vinci IGs

The following page ,FHIR Access Permissions, is provided for guidance only and addresses an approach to control access to sub-sets of Patient or Group records by external parties.

Next Page - FHIR Access Permissions