HL7 Personal Health Record System Functional Model, Release 2
2.0.1-ballot - Normative Ballot
HL7 Personal Health Record System Functional Model, Release 2, published by EHR WG. This guide is not an authorized publication; it is the continuous build for version 2.0.1-ballot built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/phrsfm-ig/ and changes regularly. See the Directory of published versions
Page standards status: Informative |
Maintain Evidence of Record Entry De-Identification Event
Evidence of Record Entry De-Identification Event includes key metadata, ensures health record integrity (and trust) and enables record audit.
RI.1.1.10.1#01 | SHALL |
The system SHALL audit each occurrence when Record Entry content is de-identified. |
RI.1.1.10.1#02 | SHALL |
The system SHALL capture identity of the organization where Record Entry content is de-identified. |
RI.1.1.10.1#03 | SHALL |
The system SHALL capture identity of the patient who is subject of de-identified Record Entry content. |
RI.1.1.10.1#04 | SHALL |
The system SHALL capture identity of the user de-identifying Record Entry content. |
RI.1.1.10.1#05 | SHALL |
The system SHALL capture identity of the system application which de-identified Record Entry content. |
RI.1.1.10.1#06 | SHALL |
The system SHALL capture the type of Record Event trigger (i.e., de-identify). |
RI.1.1.10.1#07 | SHALL |
The system SHALL capture the date and time Record Entry content is de-identified. |
RI.1.1.10.1#08 | SHOULD |
The system SHOULD capture identity of the location (i.e., network address) where Record Entry content is de-identified. |
RI.1.1.10.1#09 | MAY |
The system MAY capture the rationale for de-identifying Record Entry content. |
RI.1.1.10.1#10 | MAY |
The system MAY capture the data, document or other identifier for de-identified Record Entry content. |