Scalable Consent Management
1.0.0-ballot - STU 1 - Ballot United States of America flag

Scalable Consent Management, published by HL7 International / Community Based Collaborative Care. This guide is not an authorized publication; it is the continuous build for version 1.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-consent-management/ and changes regularly. See the Directory of published versions

Example AuditEvent: ConsentAuditEventExample

Page standards status: Informative

type: DICOM: 110113 (Security Alert)

subtype: Authorization subType events: AuthZ-Consent (Authorization Decision using Roles and Consent)

action: Execute

recorded: 2025-11-01 11:30:59-0700

outcome: Success

outcomeDesc: Returned patient health information

purposeOfEvent: care management

agent

type: Application

who: Identifier: United States National Provider Identifier/1234567893

requestor: false

Networks

-Address
*192.168.0.1

agent

type: information recipient

who: Identifier: United States National Provider Identifier/345678931

requestor: true

agent

type: healthcare provider

who: Identifier: United States National Provider Identifier/101010101

requestor: false

agent

type: Authorization Server

who: Identifier: United States National Provider Identifier/234567890

requestor: false

Sources

-Observer
*Identifier: United States National Provider Identifier/234567890

entity

what: Identifier: http://example.org/mrn/M1230041

type: Audit event entity type: 1 (Person)

role: AuditEventEntityRole: 1 (Patient)

entity

what: Consent: extension = id: http://hl7.org/fhir/sid/us-npi#United States National Provider Identifier#1234567893; identifier = http://example.org/consent#33445522; status = active; scope = Privacy Consent; category = information access; dateTime = 2024-01-01; source[x] = ->Response to Questionnaire 'http://example.org/fhir/Questionnaire/Simple-Consent-Form' about 'id: http://example.org/mrn#M1230041'; policyRule = HIPAA Authorization

type: ResourceType: Consent (Consent)