US Quality Core Implementation Guide, published by HL7 International / Clinical Quality Information. This guide is not an authorized publication; it is the continuous build for version 1.0.0-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/fhir-us-quality-core/ and changes regularly. See the Directory of published versions

Security

Page standards status: Informative

Highlight text changes?

Quality applications may make use of patient-specific information. For this reason, all transactions must be appropriately secured, limiting access to authorized individuals and protecting data while in transit (as laid out in the FHIR Implementer's Safety Check List). These considerations relate to any FHIR implementation, including authentication, authorization, access control consistent with patient consent, transaction logging, and adherence to best practices.

The US Core Security section provides additional expectations that apply to this guide.