Release 5 Draft Ballot

This is the Continuous Integration Build of FHIR (will be incorrect/inconsistent at times).
See the Directory of published versions Value Set

Security Work Group Maturity Level: 0Informative Use Context: Any

This is a value set defined by the FHIR project.


Defining URL:
Title:Example set of Event / Bundle used Security Labels

A sample of security labels from Healthcare Privacy and Security Classification System that are used on events and requests/responses (aka user context or organization context) made up of PurposeOfUse and maybe a refrain/obligation.

Committee:Security Work Group
OID:2.16.840.1.113883.4.642.3.0 (for OID based terminology systems)
Source ResourceXML / JSON

This value set is not currently used

This value set includes codes based on the following rules:

  • Include these codes as defined in
    TREAT treatmentTo perform one or more operations on information for provision of health care.
    HPAYMT healthcare paymentTo perform one or more operations on information for conducting financial or contractual activities related to payment for provision of health care.
    ETREAT Emergency TreatmentTo perform one or more operations on information for provision of immediately needed health care for an emergent condition.
  • Include these codes as defined in
    NOAUTH no disclosure without subject authorizationProhibition on disclosure without information subject's authorization.
    DELAU delete after useCustodian system must remove target information from access after use.
    NORDSCLCD no redisclosure without consent directiveProhibition on redisclosure without patient consent directive.


See the full registry of value sets defined as part of FHIR.

Explanation of the columns that may appear on this page:

LvlA few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information
SourceThe source of the definition of the code (when the value set draws in codes defined elsewhere)
CodeThe code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract')
DisplayThe display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application
DefinitionAn explanation of the meaning of the concept
CommentsAdditional notes about how to use the code