RIVO-Noord Zorgviewer Implementation Guide
1.21.0 - CI build

RIVO-Noord Zorgviewer Implementation Guide, published by RIVO-NN HL7NL. This guide is not an authorized publication; it is the continuous build for version 1.21.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/RIVO-Noord/zorgviewer-ig/ and changes regularly. See the Directory of published versions

## Resource Profile: ToestemmingConsent

Official URL: http://fhir.hl7.nl/zorgviewer/StructureDefinition/ToestemmingConsent | Version: 1.21.0
Active as of 2025-10-28 | Computable Name: ToestemmingConsent

De registatie (Consent) dat de patient de RIVO-Noord policy voor toestemming van gegevensuitwisseling heeft geaccepteerd

De specificatie op deze pagina is work-in-progress.

### Mappings

- HL7 v2 ADT^A08 en ADT^A31 mapping van PID en CON segmenten

### Request

1. Opvragen (search) toestemmingen voor een patient

   `GET <toestemming-base>/Consent?patient:Patient.identifier=<BSN>`

   N.B. Bij geen resultaat heeft de patient expliciet geen toestemming gegeven of nog niet toestemming gegeven.

Usages:

- CapabilityStatements using this Profile: Toestemming
- This Profile is not used by any profiles in this Implementation Guide

You can also check for usages in the FHIR IG Statistics

Changes since version 1.20.0:

- No changes

### Formal Views of Profile Content

Description of Profiles, Differentials, Snapshots and how the different presentations work.

- Key Elements Table
- Differential Table
- Snapshot Table
- Statistics/References
- All

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
status | ?!S Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent
category | Σ | 0..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: Consent Category Codes (example): A classification of the type of consents found in a consent statement
coding | Σ | 0..* | Coding | Code defined by a terminology system
code | S Σ | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
patient | S Σ | 1..1 | Reference(Patient) | Who the consent applies to
period | S Σ | 0..1 | Period | Period that this consent applies
organization | S Σ | 0..* | Reference(Organization) | Custodian of the consent
policy | S | 0..* | BackboneElement | Policies covered by this consent
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
uri | S C | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.status | Base | required | ConsentState | 📍3.0.2 | FHIR Std.
Consent.category | Base | example | Consent Category Codes | 📍3.0.2 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-1 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain any narrative | `contained.text.empty()`
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource | `contained.where(('#'+id in %resource.descendants().reference).not()).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() | (children().count() > id.count())`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`

This structure is derived from Consent

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent |  | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time
status | S | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error
category |  |  |  |
coding |  |  |  |
code | S | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
patient | S | 1..1 | Reference(Patient) | Who the consent applies to
period | S | 0..1 | Period | Period that this consent applies
organization | S | 0..* | Reference(Organization) | Custodian of the consent
policy | S | 0..* | BackboneElement | Policies covered by this consent
uri | S | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
Documentation for this format

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1
id | Σ | 0..1 | id | Logical id of this artifact
meta | Σ | 0..1 | Meta | Metadata about the resource
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
language |  | 0..1 | code | Language of the resource content Binding: Common Languages (extensible): A human language.
Additional Bindings | Purpose
All Languages | Max Binding
text |  | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements
contained |  | 0..* | Resource | Contained, inline Resources
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
identifier | Σ | 0..1 | Identifier | Identifier for this record (external references) Example General: {"system":"urn:ietf:rfc:3986","value":"Local eCMS identifier"}
status | ?!S Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent
category | Σ | 0..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: Consent Category Codes (example): A classification of the type of consents found in a consent statement
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations Slice: Unordered, Open by value:url
coding | Σ | 0..* | Coding | Code defined by a terminology system
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations Slice: Unordered, Open by value:url
system | Σ | 0..1 | uri | Identity of the terminology system
version | Σ | 0..1 | string | Version of the system - if relevant
code | S Σ | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
display | Σ | 0..1 | string | Representation defined by the system
userSelected | Σ | 0..1 | boolean | If this coding was chosen directly by the user
text | Σ | 0..1 | string | Plain text representation of the concept
patient | S Σ | 1..1 | Reference(Patient) | Who the consent applies to
period | S Σ | 0..1 | Period | Period that this consent applies
dateTime | Σ | 0..1 | dateTime | When this Consent was created or indexed
consentingParty | Σ | 0..* | Reference(Organization | Patient | Practitioner | RelatedPerson) | Who is agreeing to the policy and exceptions
actor | Σ | 0..* | BackboneElement | Who|what controlled by this consent (or group, by role)
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson) | Resource for the actor (or group, by role)
action | Σ | 0..* | CodeableConcept | Actions controlled by this consent Binding: Consent Action Codes (example): Detailed codes for the consent action.
organization | S Σ | 0..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 0..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceIdentifier |  |  | Identifier |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
policy | S | 0..* | BackboneElement | Policies covered by this consent
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
authority | C | 0..1 | uri | Enforcement source for policy
uri | S C | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
policyRule | Σ C | 0..1 | uri | Policy that this consents to
securityLabel | Σ | 0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System.
purpose | Σ | 0..* | Coding | ​Context of activities for which the agreement is made Binding: PurposeOfUse|2014-03-26 (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels
dataPeriod | Σ | 0..1 | Period | Timeframe for data controlled by this consent
data | Σ | 0..* | BackboneElement | Data controlled by this consent
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
meaning | Σ | 1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions
reference | Σ | 1..1 | Reference(Resource) | The actual data reference
except | Σ | 0..* | BackboneElement | Additional rule - addition or removal of permissions
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
type | Σ | 1..1 | code | deny | permit Binding: ConsentExceptType (required): How an exception statement is applied, such as adding additional consent or removing consent
period | Σ | 0..1 | Period | Timeframe for this exception
actor | Σ | 0..* | BackboneElement | Who|what controlled by this exception (or group, by role)
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson) | Resource for the actor (or group, by role)
action | Σ | 0..* | CodeableConcept | Actions controlled by this exception Binding: Consent Action Codes (example): Detailed codes for the consent action.
securityLabel | Σ | 0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System.
purpose | Σ | 0..* | Coding | ​Context of activities covered by this exception Binding: PurposeOfUse|2014-03-26 (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels
class | Σ | 0..* | Coding | e.g. Resource Type, Profile, or CDA etc Binding: Consent Content Class (extensible): The class (type) of information a consent rule covers
code | Σ | 0..* | Coding | e.g. LOINC or SNOMED CT code, etc in the content Binding: Consent Content Codes (example): If this code is found in an instance, then the exception applies
dataPeriod | Σ | 0..1 | Period | Timeframe for data controlled by this exception
data | Σ | 0..* | BackboneElement | Data controlled by this exception
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
meaning | Σ | 1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions
reference | Σ | 1..1 | Reference(Resource) | The actual data reference
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.language | Base | extensible | Common Languages | 📍3.0.2 | FHIR Std.
Consent.status | Base | required | ConsentState | 📍3.0.2 | FHIR Std.
Consent.category | Base | example | Consent Category Codes | 📍3.0.2 | FHIR Std.
Consent.actor.role | Base | extensible | SecurityRoleType | 📍1.8.0 | FHIR Std.
Consent.action | Base | example | Consent Action Codes | 📍3.0.2 | FHIR Std.
Consent.securityLabel | Base | extensible | All Security Labels | 📍3.0.2 | FHIR Std.
Consent.purpose | Base | extensible | PurposeOfUse | 📍2014-03-26 | FHIR Std.
Consent.data.meaning | Base | required | ConsentDataMeaning | 📍3.0.2 | FHIR Std.
Consent.except.type | Base | required | ConsentExceptType | 📍3.0.2 | FHIR Std.
Consent.except.actor.​role | Base | extensible | SecurityRoleType | 📍1.8.0 | FHIR Std.
Consent.except.action | Base | example | Consent Action Codes | 📍3.0.2 | FHIR Std.
Consent.except.securityLabel | Base | extensible | All Security Labels | 📍3.0.2 | FHIR Std.
Consent.except.purpose | Base | extensible | PurposeOfUse | 📍2014-03-26 | FHIR Std.
Consent.except.class | Base | extensible | Consent Content Class | 📍3.0.2 | FHIR Std.
Consent.except.code | Base | example | Consent Content Codes | 📍3.0.2 | FHIR Std.
Consent.except.data.​meaning | Base | required | ConsentDataMeaning | 📍3.0.2 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-1 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain any narrative | `contained.text.empty()`
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource | `contained.where(('#'+id in %resource.descendants().reference).not()).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() | (children().count() > id.count())`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`

This structure is derived from Consent

Summary

Must-Support: 7 elements
Fixed: 2 elements

Structures

This structure refers to these other structures:

- Patient (http://fhir.hl7.nl/zorgviewer/StructureDefinition/Patient)
- Organization (http://fhir.hl7.nl/zorgviewer/StructureDefinition/Organization)

Key Elements View

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
status | ?!S Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent
category | Σ | 0..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: Consent Category Codes (example): A classification of the type of consents found in a consent statement
coding | Σ | 0..* | Coding | Code defined by a terminology system
code | S Σ | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
patient | S Σ | 1..1 | Reference(Patient) | Who the consent applies to
period | S Σ | 0..1 | Period | Period that this consent applies
organization | S Σ | 0..* | Reference(Organization) | Custodian of the consent
policy | S | 0..* | BackboneElement | Policies covered by this consent
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
uri | S C | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.status | Base | required | ConsentState | 📍3.0.2 | FHIR Std.
Consent.category | Base | example | Consent Category Codes | 📍3.0.2 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-1 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain any narrative | `contained.text.empty()`
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource | `contained.where(('#'+id in %resource.descendants().reference).not()).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() | (children().count() > id.count())`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`

Differential View

This structure is derived from Consent

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent |  | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time
status | S | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error
category |  |  |  |
coding |  |  |  |
code | S | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
patient | S | 1..1 | Reference(Patient) | Who the consent applies to
period | S | 0..1 | Period | Period that this consent applies
organization | S | 0..* | Reference(Organization) | Custodian of the consent
policy | S | 0..* | BackboneElement | Policies covered by this consent
uri | S | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
Documentation for this format

Snapshot View

Name | Flags | Card. | Type | Description & Constraints Filter: Bindings Constraints Obligations
--- | --- | --- | --- | ---
Consent | C | 0..* | Consent | A healthcare consumer's policy choices to permits or denies recipients or roles to perform actions for specific purposes and periods of time Constraints: ppc-1
id | Σ | 0..1 | id | Logical id of this artifact
meta | Σ | 0..1 | Meta | Metadata about the resource
implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created
language |  | 0..1 | code | Language of the resource content Binding: Common Languages (extensible): A human language.
Additional Bindings | Purpose
All Languages | Max Binding
text |  | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements
contained |  | 0..* | Resource | Contained, inline Resources
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored
identifier | Σ | 0..1 | Identifier | Identifier for this record (external references) Example General: {"system":"urn:ietf:rfc:3986","value":"Local eCMS identifier"}
status | ?!S Σ | 1..1 | code | draft | proposed | active | rejected | inactive | entered-in-error Binding: ConsentState (required): Indicates the state of the consent
category | Σ | 0..* | CodeableConcept | Classification of the consent statement - for indexing/retrieval Binding: Consent Category Codes (example): A classification of the type of consents found in a consent statement
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations Slice: Unordered, Open by value:url
coding | Σ | 0..* | Coding | Code defined by a terminology system
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations Slice: Unordered, Open by value:url
system | Σ | 0..1 | uri | Identity of the terminology system
version | Σ | 0..1 | string | Version of the system - if relevant
code | S Σ | 0..1 | code | Symbol in syntax defined by the system Fixed Value: Doss. delen?
display | Σ | 0..1 | string | Representation defined by the system
userSelected | Σ | 0..1 | boolean | If this coding was chosen directly by the user
text | Σ | 0..1 | string | Plain text representation of the concept
patient | S Σ | 1..1 | Reference(Patient) | Who the consent applies to
period | S Σ | 0..1 | Period | Period that this consent applies
dateTime | Σ | 0..1 | dateTime | When this Consent was created or indexed
consentingParty | Σ | 0..* | Reference(Organization | Patient | Practitioner | RelatedPerson) | Who is agreeing to the policy and exceptions
actor | Σ | 0..* | BackboneElement | Who|what controlled by this consent (or group, by role)
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson) | Resource for the actor (or group, by role)
action | Σ | 0..* | CodeableConcept | Actions controlled by this consent Binding: Consent Action Codes (example): Detailed codes for the consent action.
organization | S Σ | 0..* | Reference(Organization) | Custodian of the consent
source[x] | Σ | 0..1 |  | Source from which this consent is taken
sourceAttachment |  |  | Attachment |
sourceIdentifier |  |  | Identifier |
sourceReference |  |  | Reference(Consent | DocumentReference | Contract | QuestionnaireResponse) |
policy | S | 0..* | BackboneElement | Policies covered by this consent
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
authority | C | 0..1 | uri | Enforcement source for policy
uri | S C | 0..1 | uri | Specific policy covered by this consent Fixed Value: https://rivo-noord.nl/zorgviewer/toestemming
policyRule | Σ C | 0..1 | uri | Policy that this consents to
securityLabel | Σ | 0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System.
purpose | Σ | 0..* | Coding | ​Context of activities for which the agreement is made Binding: PurposeOfUse|2014-03-26 (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels
dataPeriod | Σ | 0..1 | Period | Timeframe for data controlled by this consent
data | Σ | 0..* | BackboneElement | Data controlled by this consent
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
meaning | Σ | 1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions
reference | Σ | 1..1 | Reference(Resource) | The actual data reference
except | Σ | 0..* | BackboneElement | Additional rule - addition or removal of permissions
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
type | Σ | 1..1 | code | deny | permit Binding: ConsentExceptType (required): How an exception statement is applied, such as adding additional consent or removing consent
period | Σ | 0..1 | Period | Timeframe for this exception
actor | Σ | 0..* | BackboneElement | Who|what controlled by this exception (or group, by role)
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
role |  | 1..1 | CodeableConcept | How the actor is involved Binding: SecurityRoleType (extensible): How an actor is involved in the consent considerations
reference |  | 1..1 | Reference(Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson) | Resource for the actor (or group, by role)
action | Σ | 0..* | CodeableConcept | Actions controlled by this exception Binding: Consent Action Codes (example): Detailed codes for the consent action.
securityLabel | Σ | 0..* | Coding | Security Labels that define affected resources Binding: All Security Labels (extensible): Security Labels from the Healthcare Privacy and Security Classification System.
purpose | Σ | 0..* | Coding | ​Context of activities covered by this exception Binding: PurposeOfUse|2014-03-26 (extensible): What purposes of use are controlled by this exception. If more than one label is specified, operations must have all the specified labels
class | Σ | 0..* | Coding | e.g. Resource Type, Profile, or CDA etc Binding: Consent Content Class (extensible): The class (type) of information a consent rule covers
code | Σ | 0..* | Coding | e.g. LOINC or SNOMED CT code, etc in the content Binding: Consent Content Codes (example): If this code is found in an instance, then the exception applies
dataPeriod | Σ | 0..1 | Period | Timeframe for data controlled by this exception
data | Σ | 0..* | BackboneElement | Data controlled by this exception
id |  | 0..1 | string | xml:id (or equivalent in JSON)
extension |  | 0..* | Extension | Additional Content defined by implementations
modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored
meaning | Σ | 1..1 | code | instance | related | dependents | authoredby Binding: ConsentDataMeaning (required): How a resource reference is interpreted when testing consent restrictions
reference | Σ | 1..1 | Reference(Resource) | The actual data reference
Documentation for this format

#### Terminology Bindings

Path | Status | Usage | ValueSet | Version | Source
Consent.language | Base | extensible | Common Languages | 📍3.0.2 | FHIR Std.
Consent.status | Base | required | ConsentState | 📍3.0.2 | FHIR Std.
Consent.category | Base | example | Consent Category Codes | 📍3.0.2 | FHIR Std.
Consent.actor.role | Base | extensible | SecurityRoleType | 📍1.8.0 | FHIR Std.
Consent.action | Base | example | Consent Action Codes | 📍3.0.2 | FHIR Std.
Consent.securityLabel | Base | extensible | All Security Labels | 📍3.0.2 | FHIR Std.
Consent.purpose | Base | extensible | PurposeOfUse | 📍2014-03-26 | FHIR Std.
Consent.data.meaning | Base | required | ConsentDataMeaning | 📍3.0.2 | FHIR Std.
Consent.except.type | Base | required | ConsentExceptType | 📍3.0.2 | FHIR Std.
Consent.except.actor.​role | Base | extensible | SecurityRoleType | 📍1.8.0 | FHIR Std.
Consent.except.action | Base | example | Consent Action Codes | 📍3.0.2 | FHIR Std.
Consent.except.securityLabel | Base | extensible | All Security Labels | 📍3.0.2 | FHIR Std.
Consent.except.purpose | Base | extensible | PurposeOfUse | 📍2014-03-26 | FHIR Std.
Consent.except.class | Base | extensible | Consent Content Class | 📍3.0.2 | FHIR Std.
Consent.except.code | Base | example | Consent Content Codes | 📍3.0.2 | FHIR Std.
Consent.except.data.​meaning | Base | required | ConsentDataMeaning | 📍3.0.2 | FHIR Std.

#### Constraints

Id | Grade | Path(s) | Description | Expression
dom-1 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain any narrative | `contained.text.empty()`
dom-2 | error | Consent | If the resource is contained in another resource, it SHALL NOT contain nested Resources | `contained.contained.empty()`
dom-3 | error | Consent | If the resource is contained in another resource, it SHALL be referred to from elsewhere in the resource | `contained.where(('#'+id in %resource.descendants().reference).not()).empty()`
dom-4 | error | Consent | If a resource is contained in another resource, it SHALL NOT have a meta.versionId or a meta.lastUpdated | `contained.meta.versionId.empty() and contained.meta.lastUpdated.empty()`
ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children | `hasValue() | (children().count() > id.count())`
ppc-1 | error | Consent | Either a Policy or PolicyRule | `policy.exists() or policyRule.exists()`

This structure is derived from Consent

Summary

Must-Support: 7 elements
Fixed: 2 elements

Structures

This structure refers to these other structures:

- Patient (http://fhir.hl7.nl/zorgviewer/StructureDefinition/Patient)
- Organization (http://fhir.hl7.nl/zorgviewer/StructureDefinition/Organization)

Other representations of profile: CSV, Excel, Schematron