Permission - FHIR v4.6.0

Release 5 Draft Ballot

This page is part of the FHIR Specification (v4.6.0: R5 Draft Ballot - see ballot notes). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions

6.5.7 Resource Permission - Detailed Descriptions

Security

Work Group

Maturity Level: 0

Trial Use

Security Category: Not Classified

Compartments: Not linked to any defined compartments

Detailed Descriptions for the elements in the Permission resource.

Permission
Element Id	Permission
Definition	Permission.
Cardinality	0..*
Type	DomainResource
Summary	false
Permission.status
Element Id	Permission.status
Definition	Status.
Cardinality	1..1
Terminology Binding	PermissionStatus (Required)
Type	code
Summary	true
Permission.intent
Element Id	Permission.intent
Definition	grant\|refuse.
Cardinality	0..1
Type	CodeableConcept
Summary	true
Permission.asserter
Element Id	Permission.asserter
Definition	The person or entity that asserts the permission.
Cardinality	0..1
Type	Reference(Person)
Summary	true
Permission.assertionDate
Element Id	Permission.assertionDate
Definition	The date that permission was asserted.
Cardinality	0..*
Type	dateTime
Alternate Names	class
Summary	true
Permission.validity
Element Id	Permission.validity
Definition	The period in which the permission is active.
Cardinality	0..1
Type	Period
Alternate Names	type
Summary	true
Permission.purpose
Element Id	Permission.purpose
Definition	The purpose for which the permission is given.
Cardinality	0..*
Type	CodeableConcept
Summary	true
Permission.dataScope
Element Id	Permission.dataScope
Definition	This can be 1) the definition of data elements, or 2) a category or label) e.g. “sensitive”. It could also be a c) graph-like definition of a set of data elements.
Cardinality	0..*
Type	Expression
Summary	true
Permission.processingActivity
Element Id	Permission.processingActivity
Definition	A description or definition of which activities are allowed to be done on the data.
Cardinality	0..*
Summary	true
Permission.processingActivity.partyReference
Element Id	Permission.processingActivity.partyReference
Definition	If the processing is a transfer, we must capture where it the data allowed or expected to be shared - with a party or person.
Cardinality	0..*
Type	Reference(Organization)
Summary	true
Permission.processingActivity.partyCodeableConcept
Element Id	Permission.processingActivity.partyCodeableConcept
Definition	If the processing is a transfer, or involves another party, we must capture where it the data allowed or expected to be shared - with a party or person. This can be a party instance or party type § Purpose – a specific purpose of the data.
Cardinality	0..*
Type	CodeableConcept
Summary	true
Permission.processingActivity.purpose
Element Id	Permission.processingActivity.purpose
Definition	The purpose for which the permission is given.
Cardinality	0..*
Type	CodeableConcept
Summary	true
Permission.justification
Element Id	Permission.justification
Definition	The asserted justification for using the data.
Cardinality	0..1
Summary	true
Permission.justification.evidence
Element Id	Permission.justification.evidence
Definition	Evidence – reference to consent, or a contract, or a policy, or a regulation, or an attachment that contains a screenshot.
Cardinality	0..*
Type	Reference(Consent)
Summary	true
Permission.justification.grounds
Element Id	Permission.justification.grounds
Definition	This would be a codeableconcept, or a coding, which can be constrained to , for example, the 6 grounds for processing in GDPR.
Cardinality	0..*
Type	CodeableConcept
Summary	true
Permission.usageLimitations
Element Id	Permission.usageLimitations
Definition	What limits apply to the use of the data.
Cardinality	0..*
Type	CodeableConcept
Summary	true