SHIFT SLS Reference Implementation Guide
0.1.0 - ci-build

SHIFT SLS Reference Implementation Guide, published by SHIFT-Task-Force. This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/SHIFT-Task-Force/sls-ri-ig/ and changes regularly. See the Directory of published versions

## OperationDefinition: SLS Tag Data Operation Definition

Official URL: http://SHIFT-Task-Force.github.io/sls-ri/OperationDefinition/sls-tag | Version: 0.1.0
Draft as of 2026-02-05 | Computable Name: SLSTag

Analyzes a Bundle of FHIR resources for sensitive information and applies appropriate security labels based on previously loaded ValueSet rules. The operation recursively searches all code, coding, and codeableConcept elements in each resource, matching them against the internal rule set. When matches are found, it applies FHIR security labels to the resource's meta.security element, including the confidentialityCode 'R' (restricted) and topic-specific security labels. Resources that have already been analyzed (indicated by the lastSourceSync extension with a timestamp later than the earliest ValueSet date) are skipped. The operation supports two modes: returning only modified resources (batch mode) or returning all resources with the original Bundle structure preserved (full mode).

URL: [base]/$sls-tag

### Parameters

Use | Name | Scope | Cardinality | Type | Binding | Documentation
IN | bundle |  | 1..1 | Bundle |  | A FHIR Bundle containing clinical resources to be analyzed for sensitive information. Supported resource types include: AllergyIntolerance, Condition, Procedure, Immunization, MedicationRequest, Medication, CarePlan, CareTeam, Goal, Observation, DiagnosticReport, DocumentReference, QuestionnaireResponse, Specimen, Encounter, and ServiceRequest.
IN | mode |  | 0..1 | code |  | Output mode: 'batch' (default) returns a Batch Bundle with only modified resources and update actions. 'full' returns a complete Bundle preserving the original Bundle.id and type, containing all resources (both modified and unmodified) from the input.
OUT | return |  | 1..1 | Bundle |  | A FHIR Bundle containing the analyzed resources. In 'batch' mode, returns a Batch Bundle with update actions for each modified resource. In 'full' mode, returns a Bundle of the same type as input, preserving Bundle.id, containing all resources. Each modified resource will have meta.security labels applied (including confidentialityCode 'R' and topic-specific labels) and a lastSourceSync extension timestamp. The Bundle.meta.security element contains distinct security labels from all resources, providing a summary of sensitive content types.