HL7 Electronic Health Record System Functional Model, Release 2.1.1
2.1.1-ballot - Normative Ballot

Publication Build: This will be filled in by the publication tooling

## : TI.1.6 Secure Data Exchange (Function) - TTL Representation

Page standards status: Informative

Raw ttl | Download

    @prefix fhir: <http://hl7.org/fhir/> .
    @prefix owl: <http://www.w3.org/2002/07/owl#> .
    @prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
    @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
    @prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

    # - resource -------------------------------------------------------------------

     a fhir:Requirements ;
      fhir:nodeRole fhir:treeRoot ;
      fhir:id [ fhir:v "EHRSFMR2-TI.1.6"] ; #
      fhir:meta [
        ( fhir:profile [
    fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/FMFunction"^^xsd:anyURI ;
    fhir:link <http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/FMFunction>     ] )
      ] ; #
      fhir:text [
    fhir:status [ fhir:v "extensions" ] ;
    fhir:div "<div xmlns=\"http://www.w3.org/1999/xhtml\">\n    <span id=\"description\"><b>Statement <a href=\"https://hl7.org/fhir/versions.html#std-process\" title=\"Normative Content\" class=\"normative-flag\">N</a>:</b> <div><p>Secure all modes of EHR data exchange.</p>\n</div></span>\n\n    \n    <span id=\"purpose\"><b>Description <a href=\"https://hl7.org/fhir/versions.html#std-process\" title=\"Informative Content\" class=\"informative-flag\">I</a>:</b> <div><p>Whenever an exchange of EHR information occurs, it requires appropriate security and privacy considerations, including data obfuscation as well as both destination and source authentication when necessary. For example, it may be necessary to encrypt data sent to remote or external destinations.</p>\n</div></span>\n    \n\n    \n    <span id=\"actors\"><b>Actors:</b><br/> ehr</span>\n    \n\n    \n    <span id=\"requirements\"><b>Criteria <a href=\"https://hl7.org/fhir/versions.html#std-process\" title=\"Normative Content\" class=\"normative-flag\">N</a>:</b></span>\n    \n    <table id=\"statements\" class=\"grid dict\">\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#01</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                \n                <span>SHALL</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>The system SHALL secure all modes of EHR data exchange.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#02</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                \n                <span>SHALL</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>The system SHALL conform to function <a href=\"Requirements-EHRSFMR2-TI.1.7.html\">TI.1.7</a> (Secure Data Routing).</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#03</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                \n                <span>SHOULD</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>The system SHOULD provide the ability to de-identify data.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#04</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                \n                <span>SHALL</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>The system SHALL encrypt and decrypt EHR data that is exchanged over a non-secure link.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#05</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                <i>dependent</i>\n                \n                \n                <i>conditional</i>\n                \n                \n                <span>SHALL</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>IF encryption is used, THEN the system SHALL exchange data using recognized standards-based encryption mechanisms according to organizational policy, and/or jurisdictional law.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#06</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                <i>conditional</i>\n                \n                \n                <span>SHOULD</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>IF the EHR-S is the recipient of a secure data exchange, THEN the system SHOULD provide the ability to transmit an acknowledgment of the receipt of the data.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n        <tr>\n            <td style=\"padding-left: 4px;\">\n                \n                <span>TI.1.6#07</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\">\n                \n                \n                \n                <span>SHALL</span>\n                \n            </td>\n            <td style=\"padding-left: 4px;\" class=\"requirement\">\n                \n                <span><div><p>The system SHALL provide the ability to determine static or dynamic addresses for known and authorized sources and destinations.</p>\n</div></span>\n                \n                \n            </td>\n        </tr>\n        \n    </table>\n</div>"^^rdf:XMLLiteral
      ] ; #
      fhir:extension ( [
    fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:code ;
    fhir:v "ehr"     ]
      ] ) ; #
      fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-TI.1.6"^^xsd:anyURI] ; #
      fhir:version [ fhir:v "2.1.1-ballot"] ; #
      fhir:name [ fhir:v "TI_1_6_Secure_Data_Exchange"] ; #
      fhir:title [ fhir:v "TI.1.6 Secure Data Exchange (Function)"] ; #
      fhir:status [ fhir:v "active"] ; #
      fhir:date [ fhir:v "2025-04-04T11:04:36+11:00"^^xsd:dateTime] ; #
      fhir:publisher [ fhir:v "HL7 International / Electronic Health Records"] ; #
      fhir:contact ( [
        ( fhir:telecom [
    fhir:system [ fhir:v "url" ] ;
    fhir:value [ fhir:v "http://www.hl7.org/Special/committees/ehr" ]     ] )
      ] ) ; #
      fhir:description [ fhir:v "Secure all modes of EHR data exchange."] ; #
      fhir:jurisdiction ( [
        ( fhir:coding [
    fhir:system [ fhir:v "http://unstats.un.org/unsd/methods/m49/m49.htm"^^xsd:anyURI ] ;
    fhir:code [ fhir:v "001" ] ;
    fhir:display [ fhir:v "World" ]     ] )
      ] ) ; #
      fhir:purpose [ fhir:v "Whenever an exchange of EHR information occurs, it requires appropriate security and privacy considerations, including data obfuscation as well as both destination and source authentication when necessary. For example, it may be necessary to encrypt data sent to remote or external destinations."] ; #
      fhir:statement ( [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-01" ] ;
    fhir:label [ fhir:v "TI.1.6#01" ] ;
        ( fhir:conformance [ fhir:v "SHALL" ] ) ;
    fhir:conditionality [ fhir:v false ] ;
    fhir:requirement [ fhir:v "The system SHALL secure all modes of EHR data exchange." ] ;
    fhir:derivedFrom [ fhir:v "EHR-S_FM_R1.1 IN.1.6#1" ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-02" ] ;
    fhir:label [ fhir:v "TI.1.6#02" ] ;
        ( fhir:conformance [ fhir:v "SHALL" ] ) ;
    fhir:conditionality [ fhir:v false ] ;
    fhir:requirement [ fhir:v "The system SHALL conform to function [TI.1.7](Requirements-EHRSFMR2-TI.1.7.html) (Secure Data Routing)." ] ;
    fhir:derivedFrom [ fhir:v "EHR-S_FM_R1.1 IN.1.6#2" ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-03" ] ;
    fhir:label [ fhir:v "TI.1.6#03" ] ;
        ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
    fhir:conditionality [ fhir:v false ] ;
    fhir:requirement [ fhir:v "The system SHOULD provide the ability to de-identify data." ] ;
    fhir:derivedFrom [ fhir:v "EHR-S_FM_R1.1 IN.1.6#3" ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-04" ] ;
    fhir:label [ fhir:v "TI.1.6#04" ] ;
        ( fhir:conformance [ fhir:v "SHALL" ] ) ;
    fhir:conditionality [ fhir:v false ] ;
    fhir:requirement [ fhir:v "The system SHALL encrypt and decrypt EHR data that is exchanged over a non-secure link." ] ;
    fhir:derivedFrom [ fhir:v "EHR-S_FM_R1.1 IN.1.6#4" ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v true       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-05" ] ;
    fhir:label [ fhir:v "TI.1.6#05" ] ;
        ( fhir:conformance [ fhir:v "SHALL" ] ) ;
    fhir:conditionality [ fhir:v true ] ;
    fhir:requirement [ fhir:v "IF encryption is used, THEN the system SHALL exchange data using recognized standards-based encryption mechanisms according to organizational policy, and/or jurisdictional law." ] ;
    fhir:derivedFrom [ fhir:v "EHR-S_FM_R1.1 IN.1.6#5" ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-06" ] ;
    fhir:label [ fhir:v "TI.1.6#06" ] ;
        ( fhir:conformance [ fhir:v "SHOULD" ] ) ;
    fhir:conditionality [ fhir:v true ] ;
    fhir:requirement [ fhir:v "IF the EHR-S is the recipient of a secure data exchange, THEN the system SHOULD provide the ability to transmit an acknowledgment of the receipt of the data." ]
      ] [
        ( fhir:extension [
    fhir:url [ fhir:v "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent"^^xsd:anyURI ] ;
    fhir:value [
    a fhir:boolean ;
    fhir:v false       ]     ] ) ;
    fhir:key [ fhir:v "EHRSFMR2-TI.1.6-07" ] ;
    fhir:label [ fhir:v "TI.1.6#07" ] ;
        ( fhir:conformance [ fhir:v "SHALL" ] ) ;
    fhir:conditionality [ fhir:v false ] ;
    fhir:requirement [ fhir:v "The system SHALL provide the ability to determine static or dynamic addresses for known and authorized sources and destinations." ]
      ] ) . #