Scalable Consent Management
1.0.0-ballot - STU 1 - Ballot United States of America flag

Scalable Consent Management, published by HL7 International / Community Based Collaborative Care. This guide is not an authorized publication; it is the continuous build for version 1.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-consent-management/ and changes regularly. See the Directory of published versions

: ConsentAuditEventExample - XML Representation

Page standards status: Informative

Raw xml | Download


<AuditEvent xmlns="http://hl7.org/fhir">
  <id value="ConsentAuditEventExample"/>
  <meta>
    <profile
             value="http://hl7.org/fhir/us/consent-management/StructureDefinition/FASTConsentAuditEvent"/>
  </meta>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: AuditEvent ConsentAuditEventExample</b></p><a name="ConsentAuditEventExample"> </a><a name="hcConsentAuditEventExample"> </a><div style="display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%"><p style="margin-bottom: 0px"/><p style="margin-bottom: 0px">Profile: <a href="StructureDefinition-FASTConsentAuditEvent.html">FASTConsentAuditEvent</a></p></div><p><b>type</b>: <a href="http://hl7.org/fhir/R4/codesystem-dicom-dcim.html#dicom-dcim-110113">DICOM: 110113</a> (Security Alert)</p><p><b>subtype</b>: <a href="https://profiles.ihe.net/ITI/BALP/1.1.4/CodeSystem-AuthZsubType.html#AuthZsubType-AuthZ-Consent">Authorization subType events: AuthZ-Consent</a> (Authorization Decision using Roles and Consent)</p><p><b>action</b>: Execute</p><p><b>recorded</b>: 2025-11-01 11:30:59-0700</p><p><b>outcome</b>: Success</p><p><b>outcomeDesc</b>: Returned patient health information</p><p><b>purposeOfEvent</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason CAREMGT}">care management</span></p><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://dicom.nema.org/resources/ontology/DCM 110150}">Application</span></p><p><b>who</b>: Identifier: <a href="http://terminology.hl7.org/5.3.0/NamingSystem-npi.html" title="National Provider Identifier">United States National Provider Identifier</a>/1234567893</p><p><b>requestor</b>: false</p><h3>Networks</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Address</b></td></tr><tr><td style="display: none">*</td><td>192.168.0.1</td></tr></table></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-ParticipationType IRCP}">information recipient</span></p><p><b>who</b>: Identifier: <a href="http://terminology.hl7.org/5.3.0/NamingSystem-npi.html" title="National Provider Identifier">United States National Provider Identifier</a>/345678931</p><p><b>requestor</b>: true</p></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/v3-RoleClass PROV}">healthcare provider</span></p><p><b>who</b>: Identifier: <a href="http://terminology.hl7.org/5.3.0/NamingSystem-npi.html" title="National Provider Identifier">United States National Provider Identifier</a>/101010101</p><p><b>requestor</b>: false</p></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title="Codes:{http://terminology.hl7.org/CodeSystem/extra-security-role-type authserver}">Authorization Server</span></p><p><b>who</b>: Identifier: <a href="http://terminology.hl7.org/5.3.0/NamingSystem-npi.html" title="National Provider Identifier">United States National Provider Identifier</a>/234567890</p><p><b>requestor</b>: false</p></blockquote><h3>Sources</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Observer</b></td></tr><tr><td style="display: none">*</td><td>Identifier: <a href="http://terminology.hl7.org/5.3.0/NamingSystem-npi.html" title="National Provider Identifier">United States National Provider Identifier</a>/234567890</td></tr></table><blockquote><p><b>entity</b></p><p><b>what</b>: Identifier: <code>http://example.org/mrn</code>/M1230041</p><p><b>type</b>: <a href="http://terminology.hl7.org/6.5.0/CodeSystem-audit-entity-type.html#audit-entity-type-1">Audit event entity type: 1</a> (Person)</p><p><b>role</b>: <a href="http://terminology.hl7.org/6.5.0/CodeSystem-object-role.html#object-role-1">AuditEventEntityRole: 1</a> (Patient)</p></blockquote><blockquote><p><b>entity</b></p><p><b>what</b>: <a href="Consent-ConsentExample.html">Consent: extension = id: http://hl7.org/fhir/sid/us-npi#United States National Provider Identifier#1234567893; identifier = http://example.org/consent#33445522; status = active; scope = Privacy Consent; category = information access; dateTime = 2024-01-01; source[x] = -&gt;Response to Questionnaire 'http://example.org/fhir/Questionnaire/Simple-Consent-Form' about 'id: http://example.org/mrn#M1230041'; policyRule = HIPAA Authorization</a></p><p><b>type</b>: <a href="http://hl7.org/fhir/R4/codesystem-resource-types.html#resource-types-Consent">ResourceType: Consent</a> (Consent)</p></blockquote></div>
  </text>
  <type>
    <system value="http://dicom.nema.org/resources/ontology/DCM"/>
    <code value="110113"/>
  </type>
  <subtype>
    <system
            value="https://profiles.ihe.net/ITI/BALP/CodeSystem/AuthZsubType"/>
    <code value="AuthZ-Consent"/>
  </subtype>
  <action value="E"/>
  <recorded value="2025-11-01T11:30:59.220-07:00"/>
  <outcome value="0"/>
  <outcomeDesc value="Returned patient health information"/>
  <purposeOfEvent>
    <coding>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
      <code value="CAREMGT"/>
    </coding>
  </purposeOfEvent>
  <agent>
    <type>
      <coding>
        <system value="http://dicom.nema.org/resources/ontology/DCM"/>
        <code value="110150"/>
      </coding>
    </type>
    <who>
      <identifier>
        <system value="http://hl7.org/fhir/sid/us-npi"/>
        <value value="1234567893"/>
      </identifier>
    </who>
    <requestor value="false"/>
    <network>
      <address value="192.168.0.1"/>
    </network>
  </agent>
  <agent>
    <type>
      <coding>
        <system
                value="http://terminology.hl7.org/CodeSystem/v3-ParticipationType"/>
        <code value="IRCP"/>
      </coding>
    </type>
    <who>
      <identifier>
        <system value="http://hl7.org/fhir/sid/us-npi"/>
        <value value="345678931"/>
      </identifier>
    </who>
    <requestor value="true"/>
  </agent>
  <agent>
    <type>
      <coding>
        <system value="http://terminology.hl7.org/CodeSystem/v3-RoleClass"/>
        <code value="PROV"/>
      </coding>
    </type>
    <who>
      <identifier>
        <system value="http://hl7.org/fhir/sid/us-npi"/>
        <value value="101010101"/>
      </identifier>
    </who>
    <requestor value="false"/>
  </agent>
  <agent>
    <type>
      <coding>
        <system
                value="http://terminology.hl7.org/CodeSystem/extra-security-role-type"/>
        <code value="authserver"/>
      </coding>
    </type>
    <who>
      <identifier>
        <system value="http://hl7.org/fhir/sid/us-npi"/>
        <value value="234567890"/>
      </identifier>
    </who>
    <requestor value="false"/>
  </agent>
  <source>
    <observer>
      <identifier>
        <system value="http://hl7.org/fhir/sid/us-npi"/>
        <value value="234567890"/>
      </identifier>
    </observer>
  </source>
  <entity>
    <what>
      <identifier>
        <system value="http://example.org/mrn"/>
        <value value="M1230041"/>
      </identifier>
    </what>
    <type>
      <system
              value="http://terminology.hl7.org/CodeSystem/audit-entity-type"/>
      <code value="1"/>
    </type>
    <role>
      <system value="http://terminology.hl7.org/CodeSystem/object-role"/>
      <code value="1"/>
    </role>
  </entity>
  <entity>
    <what>🔗 
      <reference value="Consent/ConsentExample"/>
    </what>
    <type>
      <system value="http://hl7.org/fhir/resource-types"/>
      <code value="Consent"/>
    </type>
  </entity>
</AuditEvent>