Scalable Consent Management
1.0.0-preview - STU 1 PReview US

Scalable Consent Management, published by HL7 International / Community Based Collaborative Care. This guide is not an authorized publication; it is the continuous build for version 1.0.0-preview built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-consent-management/ and changes regularly. See the Directory of published versions

: Narrative Conformance Statements

Page standards status: Trial-use Maturity Level: 1

Raw ttl | Download

@prefix fhir: <http://hl7.org/fhir/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

# - resource -------------------------------------------------------------------

 a fhir:Requirements ;
  fhir:nodeRole fhir:treeRoot ;
  fhir:id [ fhir:v "fromNarrative"] ; # 
  fhir:text [
fhir:status [ fhir:v "generated" ] ;
fhir:div [ fhir:v "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: Requirements fromNarrative</b></p><a name=\"fromNarrative\"> </a><a name=\"hcfromNarrative\"> </a><p>These requirements apply to the following actors: </p><ul><li><a href=\"ActorDefinition-consent-server.html\">Consent Server System</a></li><li><a href=\"ActorDefinition-client.html\">Consent Client System</a></li></ul><table class=\"grid\"><tr><td><b><a name=\"1\"> </a></b>1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>SC-8?^client:this guide requires that an external identifier for those participants SHALL be populated.</p>\n</div></td></tr><tr><td><b><a name=\"2\"> </a></b>2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>SC-8?^client:this guide requires that an external identifier for those participants SHALL be populated.</p>\n</div></td></tr><tr><td><b><a name=\"AE1\"> </a></b>AE1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>A FAST Consent Audit Event <strong>SHALL</strong> be created by the system that evaluates a Consent resource to determine whether a request to access patient information should be permitted or denied.</p>\n</div></td></tr><tr><td><b><a name=\"AE2\"> </a></b>AE2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>The event <strong>SHALL</strong> be created regardless of whether the authorization decision was a permit or a deny.</p>\n</div></td></tr><tr><td><b><a name=\"AE3\"> </a></b>AE3</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>an external identifier for those participants <strong>SHALL</strong> be populated.</p>\n</div></td></tr><tr><td><b><a name=\"ID1\"> </a></b>ID1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>For that reason, this guide mandates that Consent Client systems <strong>SHALL</strong> query the consent administration service for the identifiers of the involved patients, practitioners, organizations, and related persons</p>\n</div></td></tr><tr><td><b><a name=\"IN1\"> </a></b>IN1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>A consent administration service receiving a <code>POST Subscription</code> request <strong>SHOULD</strong> verify that the subscribing system is authorized to access the consents it is requesting to be notified about.</p>\n</div></td></tr><tr><td><b><a name=\"IN2\"> </a></b>IN2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>a system that cannot maintain a subscription to the consent management source <strong>SHOULD</strong> fetch a fresh copy of the consent at the time of each authorization decision rather than rely on a cached copy.</p>\n</div></td></tr><tr><td><b><a name=\"MS-1\"> </a></b>MS-1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Consent Client systems <strong>SHALL</strong> be capable of populating a mustSupport element when sharing resources compliant with the profile. I.e., the system must be able to demonstrate the population and sharing of the element, but it is acceptable to omit the element if the system doesn’t have values in a particular instance. A system that is incapable of ever sharing the element would be non-conformant.</p>\n</div></td></tr><tr><td><b><a name=\"MS-2\"> </a></b>MS-2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Consent Server systems <strong>SHALL</strong> be capable of processing resource instances containing data elements without generating an error or causing the application to fail.</p>\n</div></td></tr><tr><td><b><a name=\"MS-3\"> </a></b>MS-3</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>If the minimum cardinality of an element is greater than 0 — i.e., the element is required — then the element <strong>SHALL</strong> be present in the instance and <strong>SHALL</strong> have a value.</p>\n</div></td></tr><tr><td><b><a name=\"MS-4\"> </a></b>MS-4</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Consent Server systems <strong>SHALL</strong> interpret missing data elements within resource instances as data not being present in the sending system or not being shareable for privacy or other business reasons.</p>\n</div></td></tr><tr><td><b><a name=\"MS-5\"> </a></b>MS-5</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Consent Server systems <strong>SHALL</strong> be able to process resource instances containing data elements that have extensions in place of a value where such extensions are declared as part of the profile.</p>\n</div></td></tr><tr><td><b><a name=\"NR1\"> </a></b>NR1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>When the Consent record is created on System A, System A's system identifier <strong>SHALL</strong> be recorded in the <code>manager</code> extension of the Consent instance.</p>\n</div></td></tr><tr><td><b><a name=\"NR2\"> </a></b>NR2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Systems that ingest a Consent from another system <strong>SHALL</strong> preserve the <code>manager</code> extension value unchanged.</p>\n</div></td></tr><tr><td><b><a name=\"NR3\"> </a></b>NR3</td><td>SHALL NOT</td><td><div><p>When sharing a Consent resource with another system, the originating or forwarding system <strong>SHALL NOT</strong> modify the <code>manager</code> extension value.</p>\n</div></td></tr><tr><td><b><a name=\"NR4\"> </a></b>NR4</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>A system that receives a shared Consent resource <strong>SHOULD</strong> establish a FHIR Subscription with the system identified in the <code>manager</code> extension to receive updates to that Consent (e.g., revocations).</p>\n</div></td></tr><tr><td><b><a name=\"OP1\"> </a></b>OP1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>To satisfy the business use cases for consent management, two operations are defined that a consent administration service <strong>SHALL</strong> support: File Consent and Revoke Consent.</p>\n</div></td></tr><tr><td><b><a name=\"OP2\"> </a></b>OP2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Along with these operations, Consent administration service systems <strong>SHALL</strong> support searching for consents</p>\n</div></td></tr><tr><td><b><a name=\"OP3\"> </a></b>OP3</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Finally, a consent administration service <strong>SHALL</strong> support subscriptions to allow other systems to be informed when consents for a patient have changed.</p>\n</div></td></tr><tr><td><b><a name=\"OP4\"> </a></b>OP4</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>When filing a consent, the Consent status element <strong>SHALL</strong> be set to 'active'.</p>\n</div></td></tr><tr><td><b><a name=\"OP5\"> </a></b>OP5</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>After a consent has been revoked, the Consent status element for the revoked consent <strong>SHALL</strong> be set to 'inactive'.</p>\n</div></td></tr><tr><td><b><a name=\"OP6\"> </a></b>OP6</td><td>SHALL NOT</td><td><div><p>A revoked consent <strong>SHALL NOT</strong> be deleted from the consent management system.</p>\n</div></td></tr><tr><td><b><a name=\"OP7\"> </a></b>OP7</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>To support searching for consents, the following search parameters <strong>SHALL</strong> be supported - patient, controller, manager, date, status, and scope.</p>\n</div></td></tr><tr><td><b><a name=\"OP8\"> </a></b>OP8</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Along with the business use cases of consent management, consent administration services <strong>SHALL</strong> be able to record and retrieve disclosures of when a consent was accessed to determine whether patient information could be accessed.</p>\n</div></td></tr><tr><td><b><a name=\"OP9\"> </a></b>OP9</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>To allow systems to document and retrieve consent authorization decision events — including for disclosure to patients and requesting authorities — systems <strong>SHALL</strong> support searching for FAST Consent Audit Events</p>\n</div></td></tr><tr><td><b><a name=\"OP10\"> </a></b>OP10</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-MAY\">MAY</a></td><td><div><p>Consent Server systems <strong>MAY</strong> return an OperationOutcome with a success when they wish to provide additional structured information alongside a successful operation response.</p>\n</div></td></tr><tr><td><b><a name=\"OP11\"> </a></b>OP11</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>Consent Server systems <strong>SHOULD</strong> return an OperationOutcome with the details if an HTTP status code of 4xx or 5xx is returned.</p>\n</div></td></tr><tr><td><b><a name=\"OP12\"> </a></b>OP12</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>Systems <strong>SHALL</strong> create a FAST Consent Audit Event via a RESTful FHIR <code>POST AuditEvent</code> whenever a Consent instance is accessed to determine whether patient information can be accessed.</p>\n</div></td></tr><tr><td><b><a name=\"OP13\"> </a></b>OP13</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>To search for consents by organization identifier, implementers <strong>SHOULD</strong> use the <code>controller:identifier</code> chained search parameter (e.g., <code>GET [base]/Consent?controller:identifier=|1234567890</code>) rather than a custom organization ID search parameter.</p>\n</div></td></tr><tr><td><b><a name=\"OP14\"> </a></b>OP14</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>To search for consents by patient identifier, implementers <strong>SHOULD</strong> use the <code>patient:identifier</code> chained search parameter (e.g., <code>GET [base]/Consent?patient:identifier=http://example.org/mrn|M1230041</code>).</p>\n</div></td></tr><tr><td><b><a name=\"OP15\"> </a></b>OP15</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD-NOT\">SHOULD-NOT</a></td><td><div><p>This guide does not define an Update Consent operation, and systems conforming to this guide <strong>SHOULD NOT</strong> update an existing Consent resource in place using RESTful <code>PUT</code> or <code>PATCH</code>.</p>\n</div></td></tr><tr><td><b><a name=\"OP16\"> </a></b>OP16</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>For disclosure events, implementers <strong>SHOULD</strong> follow the <a href=\"https://profiles.ihe.net/ITI/BALP/\">IHE Basic Audit Log Patterns (BALP)</a> guide, specifically the patterns for data disclosure audit events.</p>\n</div></td></tr><tr><td><b><a name=\"OP17\"> </a></b>OP17</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>For disclosure events (cases where health information was actually shared following a permit decision), implementers <strong>SHOULD</strong> follow IHE-BALP patterns and the <a href=\"https://profiles.ihe.net/ITI/TF/Volume2/ITI-81.html\">ITI-81 Retrieve ATNA Audit Event</a> transaction for querying those events.</p>\n</div></td></tr><tr><td><b><a name=\"SC-1\"> </a></b>SC-1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>The following search parameters and search parameter combinations <strong>SHALL</strong> be supported:</p>\n</div></td></tr><tr><td><b><a name=\"SC-2\"> </a></b>SC-2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p><strong>SHALL</strong> support both read Consent by <code>id</code> <strong>AND</strong> Consent search using the <strong><a href=\"http://hl7.org/fhir/R4/search.html#id\"><code>_id</code></a></strong> search parameter:</p>\n</div></td></tr><tr><td><b><a name=\"SC-3\"> </a></b>SC-3</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p><strong>SHALL</strong> support searching a consent by an identifier such as a CDA consent document using the <strong><a href=\"http://hl7.org/fhir/R4/search.html#token\"><code>identifier</code></a></strong> search parameter:</p>\n</div></td></tr><tr><td><b><a name=\"SC-4\"> </a></b>SC-4</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p><strong>SHALL</strong> support searching a consent by a patient using the <strong><a href=\"http://hl7.org/fhir/R4/search.html#reference\"><code>patient</code></a></strong> search parameter:</p>\n</div></td></tr><tr><td><b><a name=\"SC-5\"> </a></b>SC-5</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p><strong>SHALL</strong> support searching using the combination of the <strong><a href=\"http://hl7.org/fhir/R4/search.html#reference\"><code>patient</code></a></strong> and <strong><a href=\"http://hl7.org/fhir/R4/search.html#token\"><code>status</code></a></strong> search parameters:</p>\n</div></td></tr><tr><td><b><a name=\"SC-6\"> </a></b>SC-6</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>The following search parameter combinations <strong>SHOULD</strong> be supported:</p>\n</div></td></tr><tr><td><b><a name=\"SC-7\"> </a></b>SC-7</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p><strong>SHOULD</strong> support searching using the combination of the <strong><a href=\"http://hl7.org/fhir/R4/search.html#reference\"><code>patient</code></a></strong> and <strong><a href=\"http://hl7.org/fhir/R4/search.html#date\"><code>date</code></a></strong> search parameters:</p>\n</div></td></tr><tr><td><b><a name=\"SH1\"> </a></b>SH1</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHOULD\">SHOULD</a></td><td><div><p>Systems that return a Consent resource in a search result or read interaction <strong>SHOULD</strong> record a standard FHIR AuditEvent following the <a href=\"https://profiles.ihe.net/ITI/BALP/\">IHE Basic Audit Log Patterns (BALP)</a> patterns for FHIR Search and Read events.</p>\n</div></td></tr><tr><td><b><a name=\"SH2\"> </a></b>SH2</td><td><a href=\"http://hl7.org/fhir/uv/xver-r5.r4/0.1.0/CodeSystem-conformance-expectation.html#conformance-expectation-SHALL\">SHALL</a></td><td><div><p>systems <strong>SHALL</strong> record a <a href=\"StructureDefinition-FASTConsentAuditEvent.html\">FAST Consent Audit Event</a> via a RESTful FHIR <code>POST</code> to the <code>AuditEvent</code> endpoint whenever a Consent record was consulted, no matter whether that led to health information sharing or not.</p>\n</div></td></tr></table></div>"^^rdf:XMLLiteral ]
  ] ; # 
  fhir:extension ( [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-wg>     ] ;
fhir:value [
a fhir:Code ;
fhir:v "cbcc"     ]
  ] [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm>     ] ;
fhir:value [
a fhir:Integer ;
fhir:v 1 ;
      ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom>         ] ;
fhir:value [
a fhir:Canonical ;
fhir:v "http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management>         ]       ] [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom>         ] ;
fhir:value [
a fhir:Canonical ;
fhir:v "http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management>         ]       ] )     ]
  ] [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status>     ] ;
fhir:value [
a fhir:Code ;
fhir:v "trial-use" ;
      ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom>         ] ;
fhir:value [
a fhir:Canonical ;
fhir:v "http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/ImplementationGuide/hl7.fhir.us.consent-management>         ]       ] )     ]
  ] ) ; # 
  fhir:url [
fhir:v "http://hl7.org/fhir/us/consent-management/Requirements/fromNarrative"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/Requirements/fromNarrative>
  ] ; # 
  fhir:version [ fhir:v "1.0.0-preview"] ; # 
  fhir:name [ fhir:v "FromNarrative"] ; # 
  fhir:title [ fhir:v "Narrative Conformance Statements"] ; # 
  fhir:status [ fhir:v "active"] ; # 
  fhir:experimental [ fhir:v false] ; # 
  fhir:date [ fhir:v "2026-05-20T16:41:22+02:00"^^xsd:dateTime] ; # 
  fhir:publisher [ fhir:v "HL7 International / Community Based Collaborative Care"] ; # 
  fhir:contact ( [
fhir:name [ fhir:v "HL7 International / Community Based Collaborative Care" ] ;
    ( fhir:telecom [
fhir:system [ fhir:v "url" ] ;
fhir:value [ fhir:v "http://www.hl7.org/Special/committees/homehealth" ]     ] )
  ] ) ; # 
  fhir:description [ fhir:v "Conformance statements found throughout the narrative of the IG consolidated into this computable resource for traceability purposes"] ; # 
  fhir:jurisdiction ( [
    ( fhir:coding [
fhir:system [
fhir:v "urn:iso:std:iso:3166"^^xsd:anyURI ;
fhir:l <urn:iso:std:iso:3166>       ] ;
fhir:code [ fhir:v "US" ] ;
fhir:display [ fhir:v "United States of America" ]     ] )
  ] ) ; # 
  fhir:actor ( [
fhir:v "http://hl7.org/fhir/us/consent-management/ActorDefinition/consent-server"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/ActorDefinition/consent-server> ;
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-actorkey"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-actorkey>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] )
  ] [
fhir:v "http://hl7.org/fhir/us/consent-management/ActorDefinition/client"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/us/consent-management/ActorDefinition/client> ;
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-actorkey"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-actorkey>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] )
  ] ) ; # 
  fhir:statement ( [
fhir:key [ fhir:v "1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:requirement [ fhir:v "SC-8?^client:this guide requires that an external identifier for those participants SHALL be populated." ]
  ] [
fhir:key [ fhir:v "2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:requirement [ fhir:v "SC-8?^client:this guide requires that an external identifier for those participants SHALL be populated." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "AE1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "A FAST Consent Audit Event **SHALL** be created by the system that evaluates a Consent resource to determine whether a request to access patient information should be permitted or denied." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "AE2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "The event **SHALL** be created regardless of whether the authorization decision was a permit or a deny." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "AE3" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "an external identifier for those participants **SHALL** be populated." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "ID1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "For that reason, this guide mandates that Consent Client systems **SHALL** query the consent administration service for the identifiers of the involved patients, practitioners, organizations, and related persons" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "IN1" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "A consent administration service receiving a `POST Subscription` request **SHOULD** verify that the subscribing system is authorized to access the consents it is requesting to be notified about." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "IN2" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "a system that cannot maintain a subscription to the consent management source **SHOULD** fetch a fresh copy of the consent at the time of each authorization decision rather than rely on a cached copy." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "MS-1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Client systems **SHALL** be capable of populating a mustSupport element when sharing resources compliant with the profile. I.e., the system must be able to demonstrate the population and sharing of the element, but it is acceptable to omit the element if the system doesn’t have values in a particular instance. A system that is incapable of ever sharing the element would be non-conformant." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "MS-2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Server systems **SHALL** be capable of processing resource instances containing data elements without generating an error or causing the application to fail." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "MS-3" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "If the minimum cardinality of an element is greater than 0 — i.e., the element is required — then the element **SHALL** be present in the instance and **SHALL** have a value." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "MS-4" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Server systems **SHALL** interpret missing data elements within resource instances as data not being present in the sending system or not being shareable for privacy or other business reasons." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "MS-5" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Server systems **SHALL** be able to process resource instances containing data elements that have extensions in place of a value where such extensions are declared as part of the profile." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "NR1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "When the Consent record is created on System A, System A's system identifier **SHALL** be recorded in the `manager` extension of the Consent instance." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "NR2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Systems that ingest a Consent from another system **SHALL** preserve the `manager` extension value unchanged." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementshallnot"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementshallnot>       ] ;
fhir:value [
a fhir:Boolean ;
fhir:v true       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "NR3" ] ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "When sharing a Consent resource with another system, the originating or forwarding system **SHALL NOT** modify the `manager` extension value." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "NR4" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "A system that receives a shared Consent resource **SHOULD** establish a FHIR Subscription with the system identified in the `manager` extension to receive updates to that Consent (e.g., revocations)." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "To satisfy the business use cases for consent management, two operations are defined that a consent administration service **SHALL** support: File Consent and Revoke Consent." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Along with these operations, Consent administration service systems **SHALL** support searching for consents" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP3" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Finally, a consent administration service **SHALL** support subscriptions to allow other systems to be informed when consents for a patient have changed." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "OP4" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "When filing a consent, the Consent status element **SHALL** be set to 'active'." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP5" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "After a consent has been revoked, the Consent status element for the revoked consent **SHALL** be set to 'inactive'." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementshallnot"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementshallnot>       ] ;
fhir:value [
a fhir:Boolean ;
fhir:v true       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP6" ] ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "A revoked consent **SHALL NOT** be deleted from the consent management system." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP7" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "To support searching for consents, the following search parameters **SHALL** be supported - patient, controller, manager, date, status, and scope." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP8" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Along with the business use cases of consent management, consent administration services **SHALL** be able to record and retrieve disclosures of when a consent was accessed to determine whether patient information could be accessed." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP9" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "To allow systems to document and retrieve consent authorization decision events — including for disclosure to patients and requesting authorities — systems **SHALL** support searching for FAST Consent Audit Events" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP10" ] ;
    ( fhir:conformance [ fhir:v "MAY" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Server systems **MAY** return an OperationOutcome with a success when they wish to provide additional structured information alongside a successful operation response." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP11" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Consent Server systems **SHOULD** return an OperationOutcome with the details if an HTTP status code of 4xx or 5xx is returned." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP12" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Systems **SHALL** create a FAST Consent Audit Event via a RESTful FHIR `POST AuditEvent` whenever a Consent instance is accessed to determine whether patient information can be accessed." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "OP13" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "To search for consents by organization identifier, implementers **SHOULD** use the `controller:identifier` chained search parameter (e.g., `GET [base]/Consent?controller:identifier=|1234567890`) rather than a custom organization ID search parameter." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] ) ;
fhir:key [ fhir:v "OP14" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "To search for consents by patient identifier, implementers **SHOULD** use the `patient:identifier` chained search parameter (e.g., `GET [base]/Consent?patient:identifier=http://example.org/mrn|M1230041`)." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP15" ] ;
    ( fhir:conformance [ fhir:v "SHOULD-NOT" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "This guide does not define an Update Consent operation, and systems conforming to this guide **SHOULD NOT** update an existing Consent resource in place using RESTful `PUT` or `PATCH`." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP16" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "For disclosure events, implementers **SHOULD** follow the [IHE Basic Audit Log Patterns (BALP)](https://profiles.ihe.net/ITI/BALP/) guide, specifically the patterns for data disclosure audit events." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "client"       ]     ] [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "OP17" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "For disclosure events (cases where health information was actually shared following a permit decision), implementers **SHOULD** follow IHE-BALP patterns and the [ITI-81 Retrieve ATNA Audit Event](https://profiles.ihe.net/ITI/TF/Volume2/ITI-81.html) transaction for querying those events." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-1" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "The following search parameters and search parameter combinations **SHALL** be supported:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "**SHALL** support both read Consent by `id` **AND** Consent search using the **[`_id`](http://hl7.org/fhir/R4/search.html#id)** search parameter:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-3" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "**SHALL** support searching a consent by an identifier such as a CDA consent document using the **[`identifier`](http://hl7.org/fhir/R4/search.html#token)** search parameter:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-4" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "**SHALL** support searching a consent by a patient using the **[`patient`](http://hl7.org/fhir/R4/search.html#reference)** search parameter:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-5" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "**SHALL** support searching using the combination of the **[`patient`](http://hl7.org/fhir/R4/search.html#reference)** and **[`status`](http://hl7.org/fhir/R4/search.html#token)** search parameters:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-6" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "The following search parameter combinations **SHOULD** be supported:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SC-7" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "**SHOULD** support searching using the combination of the **[`patient`](http://hl7.org/fhir/R4/search.html#reference)** and **[`date`](http://hl7.org/fhir/R4/search.html#date)** search parameters:" ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SH1" ] ;
    ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "Systems that return a Consent resource in a search result or read interaction **SHOULD** record a standard FHIR AuditEvent following the [IHE Basic Audit Log Patterns (BALP)](https://profiles.ihe.net/ITI/BALP/) patterns for FHIR Search and Read events." ]
  ] [
    ( fhir:extension [
fhir:url [
fhir:v "http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor"^^xsd:anyURI ;
fhir:l <http://hl7.org/fhir/tools/StructureDefinition/requirements-statementactor>       ] ;
fhir:value [
a fhir:Id ;
fhir:v "consent-server"       ]     ] ) ;
fhir:key [ fhir:v "SH2" ] ;
    ( fhir:conformance [ fhir:v "SHALL" ] ) ;
fhir:conditionality [ fhir:v true ] ;
fhir:requirement [ fhir:v "systems **SHALL** record a [FAST Consent Audit Event](StructureDefinition-FASTConsentAuditEvent.html) via a RESTful FHIR `POST` to the `AuditEvent` endpoint whenever a Consent record was consulted, no matter whether that led to health information sharing or not." ]
  ] ) . #