Privacy Consent on FHIR (PCF)
1.1.1-current - ci-build

Privacy Consent on FHIR (PCF), published by IHE IT Infrastructure Technical Committee. This guide is not an authorized publication; it is the continuous build for version 1.1.1-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/IHE/ITI.PCF/ and changes regularly. See the Directory of published versions

## Resource Profile: IHE PCF Explicit Basic Consent

Official URL: https://profiles.ihe.net/ITI/PCF/StructureDefinition/IHE.PCF.consentBasic | Version: 1.1.1-current
Active as of 2025-10-07 | Computable Name: BasicConsent

Explicit Basic Consent

- status 1..1 - would indicate active
- scope 1..1 - #patient-privacy
- category 1..1 - would indicate patient consent, specifically a delegation of authority
- identifier 0..1 - no defined use in PCF. This could carry business identifiers assigned to the consent instance
- patient 1..1 - would indicate the Patient resource reference for the given patient
- dateTime 1..1 - would indicate when the privacy policy was presented
- performer 1.. - would indicate the Patient resource if the patient was presented, a RelatedPerson for parent or guardian
- organization 1.. - would indicate the Organization that presented the privacy policy, and that is going to enforce that privacy policy
- source 1..1 - would point at the specific signed consent by the patient
- policy.uri 1..1 - would indicate the privacy policy that was presented. Usually, the url to the version-specific policy
- provision.type 1..1 - permit indicates agreement with the policy, deny would indicate rejection.
- provision.actor 0..* - would indicate those being granted permit / denied access, if empty then all in the community
- provision.actor.role - fixed value IRCP to indicate information recipient.
- provision.purpose - would indicate some set of authorized purposeOfUse
- provision.period MS - would indicate a sunset for the consent if applicable, empty means no expiration
- provision.provisions are allowed

Not defined in PCF, but allowed

- policy.authority - not used in PCF
- policyRule - not used in PCF

Not allowed in PCF

- provision.provision.provisions - NOT allowed, no clear use-case need and would add complexity
- verification - not used in PCF, unclear the use-case need
- provision.action - not used in PCF. The purpose is sufficient.
- provision.class - not used in PCF, unclear the use-case need
- provision.code - not used in PCF, unclear the use-case need

Specifics of Basic:

- provision.purpose - would indicate some set of authorized purposeOfUse only Treatment, Payment, or Operations, see Intermediate
- provision.securityLabel is not allowed, see Intermediate
- provision.dataPeriod is not allowed, see Intermediate
- provision.data is nto allowed, see Intermediate
- provision.provision are NOT allowed, see Intermediate

Usages:

- Examples for this Profile: Consent/ex-consent-basic-ink, Consent/ex-consent-basic-reject, Consent/ex-consent-basic-research, Consent/ex-consent-basic-treat-infant... Show 2 more, Consent/ex-consent-basic-treat and Consent/ex-consent-expired-treat

You can also check for usages in the FHIR IG Statistics

### Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots and how the different presentations work.

- Key Elements Table
- Differential Table
- Snapshot Table
- Statistics/References
- All

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
status | ?!Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent.
scope | ?!Σ | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
category | Σ | 1..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement.
patient | Σ | 1..1 | Reference(Patient) | Who the consent applies to
dateTime | Σ | 1..1 | dateTime | When this Consent was created or indexed
performer | Σ | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization | Σ | 1..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 1..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
provision | S Σ | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
type | Σ | 1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent.
period | S Σ | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role)
purpose | S Σ | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std.
Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std.
Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std.
Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.actor.​role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG
Consent.provision.data.​meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource or SHALL refer to the containing resource | `contained.where((('#'+id in (%resource.descendants().reference | %resource.descendants().as(canonical) | %resource.descendants().as(uri) | %resource.descendants().as(url))) or descendants().where(reference = '#').exists() or descendants().where(as(canonical) = '#').exists() or descendants().where(as(canonical) = '#').exists()).not()).trace('unmatched', id).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
dom-5 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a security label | `contained.meta.security.empty()`
dom-6 | best practice | Consent | A resource should have narrative for robust management | `text.`div`.exists()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() or (children().count() > id.count())`
ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both | `extension.exists() != value.exists()`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`
ppc-2 | error | Consent | IF Scope=privacy, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='patient-privacy').exists().not()`
ppc-3 | error | Consent | IF Scope=research, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='research').exists().not()`
ppc-4 | error | Consent | IF Scope=adr, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='adr').exists().not()`
ppc-5 | error | Consent | IF Scope=treatment, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='treatment').exists().not()`

This structure is derived from Consent

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent |  | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time
scope |  | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Required Pattern: At least the following
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
patient |  | 1..1 | Reference(Patient) | Who the consent applies to
dateTime |  | 1..1 | dateTime | When this Consent was created or indexed
performer |  | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization |  | 1..* | Reference(Organization) | Custodian of the consent
source[x] |  | 1..1 | Attachment, Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) | Source from which this consent is taken
policy |  |  |  |
uri |  | 1..1 | uri | Specific policy covered by this consent
verification |  | 0..0 |  |
provision | S | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
type |  | 1..1 | code | deny | permit
period | S | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
role |  | 1..1 | CodeableConcept | How the actor is involved Required Pattern: At least the following
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
action |  | 0..0 |  |
securityLabel |  | 0..0 |  |
purpose | S | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
class |  | 0..0 |  |
code |  | 0..0 |  |
dataPeriod |  | 0..0 |  |
data |  | 0..0 |  |
provision |  | 0..0 |  |
Documentation for this format

#### Terminology Bindings (Differential)

Path | Status | Usage | ValueSet | Version | Source
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5
id | Σ | 0..1 | id | Logical id of this artifact
meta | Σ | 0..1 | Meta | Metadata about the resource
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
language |  | 0..1 | code | Language of the resource content Binding: CommonLanguages (preferred): A human language.
Additional Bindings | Purpose
AllLanguages | Max Binding
text |  | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements
contained |  | 0..* | Resource | Contained, inline Resources
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
identifier | Σ | 0..* | Identifier | Identifier for this record (external references) Example General: {"system":"http://acme.org/identifier/local/eCMS","value":"Local eCMS identifier"}
status | ?!Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent.
scope | ?!Σ | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
category | Σ | 1..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement.
patient | Σ | 1..1 | Reference(Patient) | Who the consent applies to
dateTime | Σ | 1..1 | dateTime | When this Consent was created or indexed
performer | Σ | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization | Σ | 1..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 1..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
policy |  | 0..* | BackboneElement | Policies covered by this consent
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
authority | C | 0..1 | uri | Enforcement source for policy
uri | C | 1..1 | uri | Specific policy covered by this consent
policyRule | Σ C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples.
provision | S Σ | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
type | Σ | 1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent.
period | S Σ | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role)
purpose | S Σ | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.language | Base | preferred | Common Languages | 📍4.0.1 | FHIR Std.
Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std.
Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std.
Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std.
Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std.
Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.actor.​role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG
Consent.provision.data.​meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​action | Base | example | Consent Action Codes | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​securityLabel | Base | extensible | SecurityLabels | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​purpose | Base | extensible | PurposeOfUse | 📦3.1.0 | THO v6.5
Consent.provision.provision.​class | Base | extensible | Consent Content Class | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​code | Base | example | Consent Content Codes | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​data.meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource or SHALL refer to the containing resource | `contained.where((('#'+id in (%resource.descendants().reference | %resource.descendants().as(canonical) | %resource.descendants().as(uri) | %resource.descendants().as(url))) or descendants().where(reference = '#').exists() or descendants().where(as(canonical) = '#').exists() or descendants().where(as(canonical) = '#').exists()).not()).trace('unmatched', id).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
dom-5 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a security label | `contained.meta.security.empty()`
dom-6 | best practice | Consent | A resource should have narrative for robust management | `text.`div`.exists()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() or (children().count() > id.count())`
ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both | `extension.exists() != value.exists()`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`
ppc-2 | error | Consent | IF Scope=privacy, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='patient-privacy').exists().not()`
ppc-3 | error | Consent | IF Scope=research, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='research').exists().not()`
ppc-4 | error | Consent | IF Scope=adr, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='adr').exists().not()`
ppc-5 | error | Consent | IF Scope=treatment, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='treatment').exists().not()`

This structure is derived from Consent

Summary

Mandatory: 7 elements(1 nested mandatory element)
Must-Support: 4 elements
Prohibited: 9 elements

Key Elements View

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
status | ?!Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent.
scope | ?!Σ | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
category | Σ | 1..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement.
patient | Σ | 1..1 | Reference(Patient) | Who the consent applies to
dateTime | Σ | 1..1 | dateTime | When this Consent was created or indexed
performer | Σ | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization | Σ | 1..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 1..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
provision | S Σ | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
type | Σ | 1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent.
period | S Σ | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role)
purpose | S Σ | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std.
Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std.
Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std.
Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.actor.​role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG
Consent.provision.data.​meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource or SHALL refer to the containing resource | `contained.where((('#'+id in (%resource.descendants().reference | %resource.descendants().as(canonical) | %resource.descendants().as(uri) | %resource.descendants().as(url))) or descendants().where(reference = '#').exists() or descendants().where(as(canonical) = '#').exists() or descendants().where(as(canonical) = '#').exists()).not()).trace('unmatched', id).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
dom-5 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a security label | `contained.meta.security.empty()`
dom-6 | best practice | Consent | A resource should have narrative for robust management | `text.`div`.exists()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() or (children().count() > id.count())`
ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both | `extension.exists() != value.exists()`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`
ppc-2 | error | Consent | IF Scope=privacy, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='patient-privacy').exists().not()`
ppc-3 | error | Consent | IF Scope=research, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='research').exists().not()`
ppc-4 | error | Consent | IF Scope=adr, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='adr').exists().not()`
ppc-5 | error | Consent | IF Scope=treatment, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='treatment').exists().not()`

Differential View

This structure is derived from Consent

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent |  | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time
scope |  | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Required Pattern: At least the following
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
patient |  | 1..1 | Reference(Patient) | Who the consent applies to
dateTime |  | 1..1 | dateTime | When this Consent was created or indexed
performer |  | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization |  | 1..* | Reference(Organization) | Custodian of the consent
source[x] |  | 1..1 | Attachment, Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) | Source from which this consent is taken
policy |  |  |  |
uri |  | 1..1 | uri | Specific policy covered by this consent
verification |  | 0..0 |  |
provision | S | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
type |  | 1..1 | code | deny | permit
period | S | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
role |  | 1..1 | CodeableConcept | How the actor is involved Required Pattern: At least the following
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
action |  | 0..0 |  |
securityLabel |  | 0..0 |  |
purpose | S | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
class |  | 0..0 |  |
code |  | 0..0 |  |
dataPeriod |  | 0..0 |  |
data |  | 0..0 |  |
provision |  | 0..0 |  |
Documentation for this format

#### Terminology Bindings (Differential)

Path | Status | Usage | ValueSet | Version | Source
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG

Snapshot View

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's choices to permit or deny recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1, ppc-2, ppc-3, ppc-4, ppc-5
id | Σ | 0..1 | id | Logical id of this artifact
meta | Σ | 0..1 | Meta | Metadata about the resource
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
language |  | 0..1 | code | Language of the resource content Binding: CommonLanguages (preferred): A human language.
Additional Bindings | Purpose
AllLanguages | Max Binding
text |  | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements
contained |  | 0..* | Resource | Contained, inline Resources
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
identifier | Σ | 0..* | Identifier | Identifier for this record (external references) Example General: {"system":"http://acme.org/identifier/local/eCMS","value":"Local eCMS identifier"}
status | ?!Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent.
scope | ?!Σ | 1..1 | CodeableConcept | Which of the four areas this resource covers (extensible) Binding: ConsentScopeCodes (extensible): The four anticipated uses for the Consent Resource. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/consentscope
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: patient-privacy
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
category | Σ | 1..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: ConsentCategoryCodes (extensible): A classification of the type of consents found in a consent statement.
patient | Σ | 1..1 | Reference(Patient) | Who the consent applies to
dateTime | Σ | 1..1 | dateTime | When this Consent was created or indexed
performer | Σ | 1..* | Reference(Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Who is agreeing to the policy and rules
organization | Σ | 1..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 1..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
policy |  | 0..* | BackboneElement | Policies covered by this consent
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
authority | C | 0..1 | uri | Enforcement source for policy
uri | C | 1..1 | uri | Specific policy covered by this consent
policyRule | Σ C | 0..1 | CodeableConcept | Regulation that this consents to Binding: ConsentPolicyRuleCodes (extensible): Regulatory policy examples.
provision | S Σ | 1..1 | BackboneElement | Constraints to the base Consent.policyRule
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
type | Σ | 1..1 | code | deny | permit Binding: ConsentProvisionType (required): How a rule statement is applied, such as adding additional consent or removing consent.
period | S Σ | 0..1 | Period | Timeframe for this rule
actor | S | 0..* | BackboneElement | Who|what controlled by this rule (or group, by role)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations. Required Pattern: At least the following
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
coding |  | 1..* | Coding | Code defined by a terminology system Fixed Value: (Complex)
id |  | 0..1 | string | Unique id for inter-element referencing
extension |  | 0..* | Extension | Additional content defined by implementations
system |  | 1..1 | uri | Identity of the terminology system Fixed Value: http://terminology.hl7.org/CodeSystem/v3-ParticipationType
version |  | 0..1 | string | Version of the system - if relevant
code |  | 1..1 | code | Symbol in syntax defined by the system Fixed Value: IRCP
display |  | 0..1 | string | Representation defined by the system
userSelected |  | 0..1 | boolean | If this coding was chosen directly by the user
text |  | 0..1 | string | Plain text representation of the concept
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole) | Resource for the actor (or group, by role)
purpose | S Σ | 0..* | Coding | Context of activities covered by this rule Binding: Basic Purpose ValueSet (extensible)
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.language | Base | preferred | Common Languages | 📍4.0.1 | FHIR Std.
Consent.status | Base | required | ConsentState | 📍4.0.1 | FHIR Std.
Consent.scope | Base | extensible | Consent Scope Codes | 📍4.0.1 | FHIR Std.
Consent.category | Base | extensible | Consent Category Codes | 📍4.0.1 | FHIR Std.
Consent.policyRule | Base | extensible | Consent PolicyRule Codes | 📍4.0.1 | FHIR Std.
Consent.provision.type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.actor.​role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.purpose | Base | extensible | Basic Purpose ValueSet | 📦1.1.1-current | This IG
Consent.provision.data.​meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​type | Base | required | ConsentProvisionType | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​actor.role | Base | extensible | SecurityRoleType | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​action | Base | example | Consent Action Codes | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​securityLabel | Base | extensible | SecurityLabels | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​purpose | Base | extensible | PurposeOfUse | 📦3.1.0 | THO v6.5
Consent.provision.provision.​class | Base | extensible | Consent Content Class | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​code | Base | example | Consent Content Codes | 📍4.0.1 | FHIR Std.
Consent.provision.provision.​data.meaning | Base | required | ConsentDataMeaning | 📍4.0.1 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource or SHALL refer to the containing resource | `contained.where((('#'+id in (%resource.descendants().reference | %resource.descendants().as(canonical) | %resource.descendants().as(uri) | %resource.descendants().as(url))) or descendants().where(reference = '#').exists() or descendants().where(as(canonical) = '#').exists() or descendants().where(as(canonical) = '#').exists()).not()).trace('unmatched', id).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
dom-5 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a security label | `contained.meta.security.empty()`
dom-6 | best practice | Consent | A resource should have narrative for robust management | `text.`div`.exists()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() or (children().count() > id.count())`
ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both | `extension.exists() != value.exists()`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`
ppc-2 | error | Consent | IF Scope=privacy, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='patient-privacy').exists().not()`
ppc-3 | error | Consent | IF Scope=research, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='research').exists().not()`
ppc-4 | error | Consent | IF Scope=adr, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='adr').exists().not()`
ppc-5 | error | Consent | IF Scope=treatment, there must be a patient | `patient.exists() or scope.coding.where(system='something' and code='treatment').exists().not()`

This structure is derived from Consent

Summary

Mandatory: 7 elements(1 nested mandatory element)
Must-Support: 4 elements
Prohibited: 9 elements

Other representations of profile: CSV, Excel, Schematron