Da Vinci Risk Adjustment Implementation Guide, published by HL7 International / Clinical Quality Information. This guide is not an authorized publication; it is the continuous build for version 3.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/davinci-ra/ and changes regularly. See the Directory of published versions

Privacy, Safety, and Security

Although the exact mechanisms for securing these exchanges are not specified as part of this IG:

• Exchanges are limited to mutually agreed upon (i.e., between the Server and the Client) patient lists or population.
• Systems should use standard authentication and authorization approaches. The SMART App Launch and SMART backend services authentication/authorization approach are recommended models.

• This implementation guide inherits all of the mandatory requirements and recommendations defined in the Security and Privacy section of the Da Vinci Health Record Exchange (HRex) implementaion guide. Implementers SHALL read and adhere to the guidance for the following topics:

  • Statutes, Regulations
  • FHIR Clinical Safy, Security and Implementation Guidance
  • Security/Privacy Related Technologies, Including Explicit Consent and Security Labels
  • Exchange Security
  • Additionally Protected Information
  • Security Contexts for Da Vinci IGs

The FHIR implementer’s Security Principles, Security & Privacy Module, and Implementer's Checklist helps implementers to be sure that they have considered all the parts of FHIR that impact their system design regarding privacy, security, provenance, and safety.