<status value="active"/> <date value="2025-12-19T08:44:27+00:00"/> <publisher value="HL7 International / Electronic Health Records"/> <contact> <telecom> <system value="url"/> <value value="http://www.hl7.org/Special/committees/ehr"/> </telecom> </contact> <description value="Manage a patient's access to personal health information."/> <jurisdiction> <coding> <system value="urn:iso:std:iso:3166"/> <code value="US"/> </coding> </jurisdiction> <purpose value="A healthcare delivery organization will be able to manage a patient's ability to view his or her EHR based on organization policy or jurisdictional law. Typically, a patient or their legal representative (e.g., guardian, surrogate) has the right to view his or her EHR."/> <derivedFrom value="http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.1.4"/> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="true"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.1.4-01"/> <label value="TI.1.4#01"/> <conformance value="SHALL"/> <conditionality value="true"/> <requirement value="IF organizational policy allows patient access to the EHR-S, THEN the system SHALL conform to function [TI.1.3](Requirements-DHFPR2-TI.1.3.html) (Entity Access Control)."/> <derivedFrom value="TI.1.4#1"/> </statement> <statement> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"> <valueBoolean value="true"/> </extension> <extension url="http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info"> <valueCode value="NC"/> </extension> <key value="DHFPR2-TI.1.4-02"/> <label value="TI.1.4#02"/> <conformance value="SHALL"/> <conditionality value="true"/> <requirement value="IF organizational policy allows patient access to the EHR-S, THEN the system SHALL conform to function [TI.1.2](Requirements-DHFPR2-TI.1.2.html) (Entity Authorization)."/> <derivedFrom value="TI.1.4#2"/> </statement> </Requirements>

Description I:

A healthcare delivery organization will be able to manage a patient's ability to view his or her EHR based on organization policy or jurisdictional law. Typically, a patient or their legal representative (e.g., guardian, surrogate) has the right to view his or her EHR.

Criteria N:

TI.1.4#01

SHALL dependent conditional

IF organizational policy allows patient access to the EHR-S, THEN the system SHALL conform to function TI.1.3 (Entity Access Control).

TI.1.4#02

SHALL dependent conditional

IF organizational policy allows patient access to the EHR-S, THEN the system SHALL conform to function TI.1.2 (Entity Authorization).