{ "resourceType" : "Requirements", "id" : "DHFPR2-TI.1.5", "meta" : { "profile" : ["http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/FMFunction"] }, "language" : "en", "text" : { "status" : "extensions", "div" : "
\n \n \n \n \n
Description I:

An EHR-S allows data entry to a patient's electronic health record and it can be a sender or receiver of healthcare information. Non-repudiation is a way to guarantee that the source of the data/record cannot later deny that fact; and that the sender of a message cannot later deny having sent the message; and that the recipient cannot deny having received the message. Components of non-repudiation can include:

\n
    \n
  • Digital signature, which serves as a unique identifier for an individual (much like a written signature);
    • \n
  • Confirmation service, which utilizes a message transfer agent to create a digital receipt (providing confirmation that a message was sent, and/or received);
    • \n
  • Timestamp, which proves that a document existed at a certain date and time;
    • \n
  • The use of standardized timekeeping protocols (e.g., the Integrating the Healthcare Enterprise (IHE) Consistent Time Profile).
    • \n
\n
\n \n \n \n
Criteria N:
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
\n TI.1.5#01\n \n SHALL\n \n \n dependent\n \n \n \n \n \n \n \n

The system SHALL capture the identity of the entity taking the action according to scope of practice, organizational policy, and/or jurisdictional law.

\n
\n \n
\n TI.1.5#02\n \n SHALL\n \n \n dependent\n \n \n \n \n \n \n \n

The system SHALL capture time stamp of the initial entry, modification and exchange of data according to scope of practice, organizational policy, and/or jurisdictional law.

\n
\n \n
\n TI.1.5#03\n \n SHALL\n \n \n dependent\n \n \n \n \n \n \n \n

The system SHALL conform to function TI.2 (Audit) to prevent repudiation of data origination, transmission and receipt according to scope of practice, organizational policy, and/or jurisdictional law.

\n
\n \n
\n TI.1.5#04\n \n SHOULD\n \n \n dependent\n \n \n \n \n \n \n \n

The system SHOULD conform to function RI.1.1.4 (Attest Record Entry Content) to ensure integrity of data and data exchange and thus prevent repudiation of data origination, transmission or receipt according to scope of practice, organizational policy, and/or jurisdictional law.

\n
\n \n
\n
" }, "extension" : [{ "url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status", "valueCode" : "informative" }, { "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info", "valueCode" : "NC" }, { "url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg", "valueCode" : "ehr" }, { "url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm", "valueInteger" : 1, "_valueInteger" : { "extension" : [{ "url" : "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom", "valueCanonical" : "http://hl7.org/ehrs/us/dhfpr2/ImplementationGuide/hl7.ehrs.us.dhfpr2" }] } }], "url" : "http://hl7.org/ehrs/us/dhfpr2/Requirements/DHFPR2-TI.1.5", "version" : "2.0.0-ballot", "name" : "TI_1_5_Non_Repudiation", "title" : "TI.1.5 Non-Repudiation (Function)", "status" : "active", "date" : "2025-12-19T08:44:27+00:00", "publisher" : "HL7 International / Electronic Health Records", "contact" : [{ "telecom" : [{ "system" : "url", "value" : "http://www.hl7.org/Special/committees/ehr" }] }], "description" : "Limit an EHR-S user's ability to deny (repudiate) data origination, transmission or receipt by that user.", "jurisdiction" : [{ "coding" : [{ "system" : "urn:iso:std:iso:3166", "code" : "US" }] }], "purpose" : "An EHR-S allows data entry to a patient's electronic health record and it can be a sender or receiver of healthcare information. Non-repudiation is a way to guarantee that the source of the data/record cannot later deny that fact; and that the sender of a message cannot later deny having sent the message; and that the recipient cannot deny having received the message. Components of non-repudiation can include:\n- Digital signature, which serves as a unique identifier for an individual (much like a written signature);\n- Confirmation service, which utilizes a message transfer agent to create a digital receipt (providing confirmation that a message was sent, and/or received);\n- Timestamp, which proves that a document existed at a certain date and time;\n- The use of standardized timekeeping protocols (e.g., the Integrating the Healthcare Enterprise (IHE) Consistent Time Profile).", "derivedFrom" : ["http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.1.5"], "statement" : [{ "extension" : [{ "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent", "valueBoolean" : true }, { "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info", "valueCode" : "NC" }], "key" : "DHFPR2-TI.1.5-01", "label" : "TI.1.5#01", "conformance" : ["SHALL"], "conditionality" : false, "requirement" : "The system SHALL capture the identity of the entity taking the action according to scope of practice, organizational policy, and/or jurisdictional law.", "derivedFrom" : "TI.1.5#1" }, { "extension" : [{ "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent", "valueBoolean" : true }, { "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info", "valueCode" : "NC" }], "key" : "DHFPR2-TI.1.5-02", "label" : "TI.1.5#02", "conformance" : ["SHALL"], "conditionality" : false, "requirement" : "The system SHALL capture time stamp of the initial entry, modification and exchange of data according to scope of practice, organizational policy, and/or jurisdictional law.", "derivedFrom" : "TI.1.5#2" }, { "extension" : [{ "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent", "valueBoolean" : true }, { "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info", "valueCode" : "NC" }], "key" : "DHFPR2-TI.1.5-03", "label" : "TI.1.5#03", "conformance" : ["SHALL"], "conditionality" : false, "requirement" : "The system SHALL conform to function [TI.2](Requirements-DHFPR2-TI.2.html) (Audit) to prevent repudiation of data origination, transmission and receipt according to scope of practice, organizational policy, and/or jurisdictional law.", "derivedFrom" : "TI.1.5#3" }, { "extension" : [{ "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent", "valueBoolean" : true }, { "url" : "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-change-info", "valueCode" : "NC" }], "key" : "DHFPR2-TI.1.5-04", "label" : "TI.1.5#04", "conformance" : ["SHOULD"], "conditionality" : false, "requirement" : "The system SHOULD conform to function [RI.1.1.4](Requirements-DHFPR2-RI.1.1.4.html) (Attest Record Entry Content) to ensure integrity of data and data exchange and thus prevent repudiation of data origination, transmission or receipt according to scope of practice, organizational policy, and/or jurisdictional law.", "derivedFrom" : "TI.1.5#4" }] }