Consent-example-smartonfhir.xml

Template for recording a Smart on FHIR Authorization (id = "consent-example-smartonfhir")

<?xml version="1.0" encoding="UTF-8"?>

<Consent xmlns="http://hl7.org/fhir">
  <id value="consent-example-smartonfhir"/> 
  <text> <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml"><p> <b> Generated Narrative with Details</b> </p> <p> <b> id</b> : consent-example-smartonfhir</p> <p> <b> status</b> : in-progress</p> <p> <b> scope</b> : Privacy Consent <span> (Details : {http://terminology.hl7.org/CodeSystem/consentscope code 'patient-privacy'
           = 'Privacy Consent)</span> </p> <p> <b> category</b> : Patient Consent <span> (Details : {LOINC code '59284-0' = 'Patient Consent)</span> </p> <p> <b> patient</b> : <a> Patient/xcda</a> </p> <p> <b> dateTime</b> : 23/06/2016 5:02:33 PM</p> <p> <b> performer</b> : <a> RelatedPerson/peter</a> </p> <p> <b> organization</b> : <a> Organization/f001</a> </p> <p> <b> policyRule</b> : opt-in <span> (Details : {http://terminology.hl7.org/CodeSystem/v3-ActCode code 'OPTIN' = 'opt-in)</span> </p> <blockquote> <p> <b> provision</b> </p> <p> <b> period</b> : 23/06/2016 5:02:33 PM --&gt; 23/06/2016 5:32:33 PM</p> <h3> Provisions</h3> <table> <tr> <td> -</td> </tr> <tr> <td> *</td> </tr> </table> </blockquote> </div> </text> <status value="in-progress"/> 
  <scope> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/consentscope"/> 
      <code value="patient-privacy"/> 
    </coding> 
    </scope> 
      <category> 
    <coding> 
      <system value="http://loinc.org"/> 
      <code value="59284-0"/> 
    </coding> 
  </category> 
  <!--    
   In this SMART on FHIR login, the user consents for data sharing 
   for their elderly parent's record
     -->
  <patient> 
    <reference value="Patient/xcda"/> 
  </patient> 
  <dateTime value="2016-06-23T17:02:33+10:00"/> 
  <performer> 
    <!--    this is the patient record that matches the person
      making the decision. note: it's not always a related person
       -->
    <reference value="RelatedPerson/peter"/> 
  </performer> 
  <organization> 
    <!--    The organization running the Authentication server    -->
    <reference value="Organization/f001"/> 
  </organization> 
  <!--    there's no source record for a Smart on FHIR consent    -->
  <!--    now the consent details itself start    -->
  <!--    smart on fhir is always the base opt-in policy    -->
  <policyRule> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/> 
      <code value="OPTIN"/> 
    </coding> 
  </policyRule> 
  <!--    each scope that relates to FHIR resource access is represented as an exception    -->
  <provision> 
    <period> 
      <start value="2016-06-23T17:02:33+10:00"/> 
      <end value="2016-06-23T17:32:33+10:00"/> 
    </period> 
    <provision> 
      <!--    this rule corresponds to MedicationRequest/read    -->
      <type value="permit"/> 
      <!--    no actors here, or anything, just read/write and the resource type    -->
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="access"/> 
        </coding> 
      </action> 
      <class> 
        <system value="http://hl7.org/fhir/resource-types"/> 
        <code value="MedicationRequest"/> 
      </class> 
    </provision> 
  </provision> 
</Consent>