Release 5 Preview #2

This page is part of the FHIR Specification (v4.4.0: R5 Preview #2). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R5 R4B R4 R3 R2

4.4.1.111 Value Set http://hl7.org/fhir/ValueSet/audit-event-type

Security Work Group Maturity Level: 3Trial Use Use Context: Any

This is a value set defined by the FHIR project.

Summary

Defining URL:http://hl7.org/fhir/ValueSet/audit-event-type
Version:4.4.0
Name:AuditEventID
Title:Audit Event ID
Definition:

Event Types for Audit Events - defined by DICOM with some FHIR specific additions.

Committee:Security Work Group
OID:2.16.840.1.113883.4.642.3.462 (for OID based terminology systems)
Copyright:

These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association.

Source ResourceXML / JSON

This value set is used in the following places:

4.4.1.111.1 Content Logical Definition

  • Include these codes as defined in http://dicom.nema.org/resources/ontology/DCM
    CodeDisplay
    110100Application ActivityAudit event: Application Activity has taken place
    110101Audit Log UsedAudit event: Audit Log has been used
    110102Begin Transferring DICOM InstancesAudit event: Storage of DICOM Instances has begun
    110103DICOM Instances AccessedAudit event: DICOM Instances have been created, read, updated, or deleted
    110104DICOM Instances TransferredAudit event: Storage of DICOM Instances has been completed
    110105DICOM Study DeletedAudit event: Entire Study has been deleted
    110106ExportAudit event: Data has been exported out of the system
    110107ImportAudit event: Data has been imported into the system
    110108Network EntryAudit event: System has joined or left network
    110109Order RecordAudit event: Order has been created, read, updated or deleted
    110110Patient RecordAudit event: Patient Record has been created, read, updated, or deleted
    110111Procedure RecordAudit event: Procedure Record has been created, read, updated, or deleted
    110112QueryAudit event: Query has been made
    110113Security AlertAudit event: Security Alert has been raised
    110114User AuthenticationAudit event: User Authentication has been attempted
  • Include all codes defined in http://terminology.hl7.org/CodeSystem/audit-event-type
  • Include all codes defined in http://terminology.hl7.org/CodeSystem/iso-21089-lifecycle

This value set includes codes based on the following rules:

 

4.4.1.111.2 Expansion

This expansion generated 03 May 2020

This value set contains 43 concepts

CodeSystemDisplayLogical Definition (CLD)
110100http://dicom.nema.org/resources/ontology/DCMApplication ActivityAudit event: Application Activity has taken place
110101http://dicom.nema.org/resources/ontology/DCMAudit Log UsedAudit event: Audit Log has been used
110102http://dicom.nema.org/resources/ontology/DCMBegin Transferring DICOM InstancesAudit event: Storage of DICOM Instances has begun
110103http://dicom.nema.org/resources/ontology/DCMDICOM Instances AccessedAudit event: DICOM Instances have been created, read, updated, or deleted
110104http://dicom.nema.org/resources/ontology/DCMDICOM Instances TransferredAudit event: Storage of DICOM Instances has been completed
110105http://dicom.nema.org/resources/ontology/DCMDICOM Study DeletedAudit event: Entire Study has been deleted
110106http://dicom.nema.org/resources/ontology/DCMExportAudit event: Data has been exported out of the system
110107http://dicom.nema.org/resources/ontology/DCMImportAudit event: Data has been imported into the system
110108http://dicom.nema.org/resources/ontology/DCMNetwork EntryAudit event: System has joined or left network
110109http://dicom.nema.org/resources/ontology/DCMOrder RecordAudit event: Order has been created, read, updated or deleted
110110http://dicom.nema.org/resources/ontology/DCMPatient RecordAudit event: Patient Record has been created, read, updated, or deleted
110111http://dicom.nema.org/resources/ontology/DCMProcedure RecordAudit event: Procedure Record has been created, read, updated, or deleted
110112http://dicom.nema.org/resources/ontology/DCMQueryAudit event: Query has been made
110113http://dicom.nema.org/resources/ontology/DCMSecurity AlertAudit event: Security Alert has been raised
110114http://dicom.nema.org/resources/ontology/DCMUser AuthenticationAudit event: User Authentication has been attempted
resthttp://terminology.hl7.org/CodeSystem/audit-event-typeRESTful OperationAudit Event: Execution of a RESTful operation as defined by FHIR.
accesshttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAccess/View Record Lifecycle EventOccurs when an agent causes the system to obtain and open a record entry for inspection or review.
holdhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAdd Legal Hold Record Lifecycle EventOccurs when an agent causes the system to tag or otherwise indicate special access management and suspension of record entry deletion/destruction, if deemed relevant to a lawsuit or which are reasonably anticipated to be relevant or to fulfill organizational policy under the legal doctrine of “duty to preserve”.
amendhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAmend (Update) Record Lifecycle EventOccurs when an agent makes any change to record entry content currently residing in storage considered permanent (persistent).
archivehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleArchive Record Lifecycle EventOccurs when an agent causes the system to create and move archive artifacts containing record entry content, typically to long-term offline storage.
attesthttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleAttest Record Lifecycle EventOccurs when an agent causes the system to capture the agent’s digital signature (or equivalent indication) during formal validation of record entry content.
decrypthttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDecrypt Record Lifecycle EventOccurs when an agent causes the system to decode record entry content from a cipher.
deidentifyhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDe-Identify (Anononymize) Record Lifecycle EventOccurs when an agent causes the system to scrub record entry content to reduce the association between a set of identifying data and the data subject in a way that might or might not be reversible.
deprecatehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDeprecate Record Lifecycle EventOccurs when an agent causes the system to tag record entry(ies) as obsolete, erroneous or untrustworthy, to warn against its future use.
destroyhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDestroy/Delete Record Lifecycle EventOccurs when an agent causes the system to permanently erase record entry content from the system.
disclosehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleDisclose Record Lifecycle EventOccurs when an agent causes the system to release, transfer, provision access to, or otherwise divulge record entry content.
encrypthttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleEncrypt Record Lifecycle EventOccurs when an agent causes the system to encode record entry content in a cipher.
extracthttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleExtract Record Lifecycle EventOccurs when an agent causes the system to selectively pull out a subset of record entry content, based on explicit criteria.
linkhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleLink Record Lifecycle EventOccurs when an agent causes the system to connect related record entries.
mergehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleMerge Record Lifecycle EventOccurs when an agent causes the system to combine or join content from two or more record entries, resulting in a single logical record entry.
originatehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleOriginate/Retain Record Lifecycle EventOccurs when an agent causes the system to: a) initiate capture of potential record content, and b) incorporate that content into the storage considered a permanent part of the health record.
pseudonymizehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecyclePseudonymize Record Lifecycle EventOccurs when an agent causes the system to remove record entry content to reduce the association between a set of identifying data and the data subject in a way that may be reversible.
reactivatehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRe-activate Record Lifecycle EventOccurs when an agent causes the system to recreate or restore full status to record entries previously deleted or deprecated.
receivehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleReceive/Retain Record Lifecycle EventOccurs when an agent causes the system to a) initiate capture of data content from elsewhere, and b) incorporate that content into the storage considered a permanent part of the health record.
reidentifyhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRe-identify Record Lifecycle EventOccurs when an agent causes the system to restore information to data that allows identification of information source and/or information subject.
unholdhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRemove Legal Hold Record Lifecycle EventOccurs when an agent causes the system to remove a tag or other cues for special access management had required to fulfill organizational policy under the legal doctrine of “duty to preserve”.
reporthttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleReport (Output) Record Lifecycle EventOccurs when an agent causes the system to produce and deliver record entry content in a particular form and manner.
restorehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleRestore Record Lifecycle EventOccurs when an agent causes the system to recreate record entries and their content from a previous created archive artefact.
transformhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleTransform/Translate Record Lifecycle EventOccurs when an agent causes the system to change the form, language or code system used to represent record entry content.
transmithttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleTransmit Record Lifecycle EventOccurs when an agent causes the system to send record entry content from one (EHR/PHR/other) system to another.
unlinkhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleUnlink Record Lifecycle EventOccurs when an agent causes the system to disconnect two or more record entries previously connected, rendering them separate (disconnected) again.
unmergehttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleUnmerge Record Lifecycle EventOccurs when an agent causes the system to reverse a previous record entry merge operation, rendering them separate again.
verifyhttp://terminology.hl7.org/CodeSystem/iso-21089-lifecycleVerify Record Lifecycle EventOccurs when an agent causes the system to confirm compliance of data or data objects with regulations, requirements, specifications, or other imposed conditions based on organizational policy.

 

See the full registry of value sets defined as part of FHIR.

Explanation of the columns that may appear on this page:

LvlA few code lists that FHIR defines are hierarchical - each code is assigned a level. For value sets, levels are mostly used to organize codes for user convenience, but may follow code system hierarchy - see Code System for further information
SourceThe source of the definition of the code (when the value set draws in codes defined elsewhere)
CodeThe code (used as the code in the resource instance). If the code is in italics, this indicates that the code is not selectable ('Abstract')
DisplayThe display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application
DefinitionAn explanation of the meaning of the concept
CommentsAdditional notes about how to use the code