HL7 Personal Health Record System Functional Model, Release 2
2.0.1-ballot - Normative Ballot

Publication Build: This will be filled in by the publication tooling

## Requirements: PH.3.5.3 Manage a Registry and Directory of Actors (Function)

Page standards status: Informative

Statement N:

Each individual or entity that accesses the PHR-S should be identified in a directory that contains contact information and specific access rights.

Description I:

The PHR Account Holder should have control of who has access to his or her PHR-S. All entities that send information to or request information from the PHR-S should be identified for proper authentication and authorization. The PHR Account Holder may establish specific access rights for each actor or groups such as all emergency room physicians. The list of actors may be used to capture contact information for those without digital capability as well. Potential actors may include but are not limited to:

- PHR Account Holder Proxy
- Trusted relatives, friends, and caregivers.
- Healthcare providers that are part of the Account Holder’s team.
- Former providers and new providers not yet seen.
- Insurance plans.
- Pharmacy Benefits Manager, Pharmacies.
- Public health registries.
- Other registries including cancer, transplant and research.
- Hospitals, laboratories and diagnostic imaging centers.

All PHR data is associated with a source and all sources should be identified and maintained as long as the data is maintained. All entities making a request for information or receiving information should be identified.

Example(s): Each provider should be registered before being granted access rights to the PHR-S.

Actors:
ehr Criteria N:

PH.3.5.3#01 | SHALL | The system SHALL maintain a directory of all Authorized PHR Users (e.g., actors or organizations) that have requested or have been granted access to the PHR Account Holder's account including data providers and PHR Account Holder Proxies that supply information for possible import into the PHR-S. Satisfied by: https://www.hl7.org/fhir/practitioner.html
PH.3.5.3#02 | dependent SHALL | The system SHALL conform to section S.1.3 (Manage Health Care Provider Information), S.4.2 (Registry Notification and Management), S.4.3 (Manage Donor Information), S.4.5 (Manage PHR Account Holder Reminder Information Updates), PH.6.6 (Referrals and Referral Process (CC05 mentions a registry that lists people who abuse the healthcare system)) in order for the PHR Account Holder to control access rights to specific sections of the PHR-S for each actor in the directory according to user-preference, organizational policy, and/or jurisdictional law.
PH.3.5.3#03 | SHALL | The system SHALL conform to functions in the Supportive Services Section that manage directory-related and/or registry-related information (e.g., information regarding a provider or a pharmacy).