Release 5 Ballot

This page is part of the FHIR Specification (v5.0.0-ballot: R5 Ballot - see ballot notes). The current version which supercedes this version is 5.0.0. For a full list of available versions, see the Directory of published versions . Page versions: R5 R4B R4 R3

Example AuditEvent/example-disclosure (Turtle)

Security Work GroupMaturity Level: N/AStandards Status: InformativeCompartments: Device, Patient, Practitioner

Raw Turtle (+ also see Turtle/RDF Format Specification)

Accounting of a Disclosure

@prefix fhir: <http://hl7.org/fhir/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

# - resource -------------------------------------------------------------------

[a fhir:AuditEvent;
  fhir:nodeRole fhir:treeRoot;
  fhir:Resource.id [ fhir:value "example-disclosure"];
  fhir:DomainResource.text [
     fhir:Narrative.status [ fhir:value "generated" ];
     fhir:Narrative.div "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p><b>Generated Narrative: AuditEvent</b><a name=\"example-disclosure\"> </a></p><div style=\"display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%\"><p style=\"margin-bottom: 0px\">Resource AuditEvent &quot;example-disclosure&quot; </p></div><p><b>category</b>: Export <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://dicom.nema.org/resources/ontology/DCM\">DICOM</a>#110106)</span></p><p><b>code</b>: HIPAA disclosure <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> ([not stated]#Disclosure)</span></p><p><b>action</b>: R</p><p><b>severity</b>: notice</p><p><b>recorded</b>: 22/09/2013 10:08:00 AM</p><h3>Outcomes</h3><table class=\"grid\"><tr><td>-</td><td><b>Code</b></td><td><b>Detail</b></td></tr><tr><td>*</td><td>Success (Details: http://terminology.hl7.org/CodeSystem/audit-event-outcome code success = 'Success', stated as 'Success')</td><td>Successful Disclosure <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> ()</span></td></tr></table><p><b>authorization</b>: healthcare marketing <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-v3-ActReason.html\">ActReason</a>#HMARKT)</span></p><p><b>patient</b>: <span title=\"  patient whos data got disclosed  \"><a href=\"patient-example.html\">Patient/example</a> &quot;Peter CHALMERS&quot;</span></p><blockquote><p><b>agent</b></p><p><b>type</b>: <span title=\"  who disclosed the data  \">Source Role ID <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://dicom.nema.org/resources/ontology/DCM\">DICOM</a>#110153)</span></span></p><p><b>who</b>: <span>: That guy everyone wishes would be caught</span></p><p><b>requestor</b>: true</p><p><b>location</b>: <a href=\"location-example.html\">Location/1</a> &quot;South Wing, second floor&quot;</p><p><b>policy</b>: <a href=\"http://consent.com/yes\">http://consent.com/yes</a></p><p><b>network</b>: custodian.net</p></blockquote><blockquote><p><b>agent</b></p><p><b>type</b>: <span title=\"  who received the data  \">Destination Role ID <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://dicom.nema.org/resources/ontology/DCM\">DICOM</a>#110152)</span></span></p><p><b>who</b>: <a href=\"practitioner-example.html\">Practitioner/example: Where</a> &quot;Adam CAREFUL&quot;</p><p><b>requestor</b>: false</p><p><b>network</b>: marketing.land</p><p><b>authorization</b>: healthcare marketing <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-v3-ActReason.html\">ActReason</a>#HMARKT)</span></p></blockquote><h3>Sources</h3><table class=\"grid\"><tr><td>-</td><td><b>Observer</b></td><td><b>Type</b></td></tr><tr><td>*</td><td><span title=\"  what system detected this disclosure  \"><span>: Watchers Accounting of Disclosures Application</span></span></td><td>Application Server <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-security-source-type.html\">Audit Event Source Type</a>#4)</span></td></tr></table><h3>Entities</h3><table class=\"grid\"><tr><td>-</td><td><b>What</b></td><td><b>Role</b></td><td><b>SecurityLabel</b></td></tr><tr><td>*</td><td><span title=\"  data that got disclosed  \"><a href=\"patient-example.html\">Patient/example/_history/1: data about Everthing important</a> &quot;Peter CHALMERS&quot;</span></td><td>Domain Resource <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"codesystem-object-role.html\">AuditEventEntityRole</a>#4)</span></td><td>very restricted <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-v3-Confidentiality.html\">Confidentiality</a>#V)</span>, sexually transmitted disease information sensitivity <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-v3-ActCode.html\">ActCode</a>#STD)</span>, delete after use <span style=\"background: LightGoldenRodYellow; margin: 4px; border: 1px solid khaki\"> (<a href=\"http://terminology.hl7.org/3.1.0/CodeSystem-v3-ActCode.html\">ActCode</a>#DELAU)</span></td></tr></table></div>"
  ];
  fhir:AuditEvent.category [
     fhir:index 0;
     fhir:CodeableConcept.coding [
       fhir:index 0;
       fhir:Coding.system [ fhir:value "http://dicom.nema.org/resources/ontology/DCM" ];
       fhir:Coding.code [ fhir:value "110106" ];
       fhir:Coding.display [ fhir:value "Export" ]
     ]
  ];
  fhir:AuditEvent.code [
     fhir:CodeableConcept.coding [
       fhir:index 0;
       fhir:Coding.code [ fhir:value "Disclosure" ];
       fhir:Coding.display [ fhir:value "HIPAA disclosure" ]
     ]
  ];
  fhir:AuditEvent.action [ fhir:value "R"];
  fhir:AuditEvent.severity [ fhir:value "notice"];
  fhir:AuditEvent.recorded [ fhir:value "2013-09-22T00:08:00Z"^^xsd:dateTime];
  fhir:AuditEvent.outcome [
     fhir:AuditEvent.outcome.code [
       fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/audit-event-outcome" ];
       fhir:Coding.code [ fhir:value "success" ];
       fhir:Coding.display [ fhir:value "Success" ]
     ];
     fhir:AuditEvent.outcome.detail [
       fhir:index 0;
       fhir:CodeableConcept.text [ fhir:value "Successful Disclosure" ]
     ]
  ];
  fhir:AuditEvent.authorization [
     fhir:index 0;
     fhir:CodeableConcept.coding [
       fhir:index 0;
       fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/v3-ActReason" ];
       fhir:Coding.code [ fhir:value "HMARKT" ];
       fhir:Coding.display [ fhir:value "healthcare marketing" ]
     ]
  ];
  fhir:AuditEvent.patient [
     fhir:Reference.reference [ fhir:value "Patient/example" ]
  ];
  fhir:AuditEvent.agent [
     fhir:index 0;
     fhir:AuditEvent.agent.type [
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://dicom.nema.org/resources/ontology/DCM" ];
         fhir:Coding.code [ fhir:value "110153" ];
         fhir:Coding.display [ fhir:value "Source Role ID" ]
       ]
     ];
     fhir:AuditEvent.agent.who [
       fhir:Reference.identifier [
         fhir:Identifier.value [ fhir:value "SomeIdiot@nowhere" ]
       ];
       fhir:Reference.display [ fhir:value "That guy everyone wishes would be caught" ]
     ];
     fhir:AuditEvent.agent.requestor [ fhir:value "true"^^xsd:boolean ];
     fhir:AuditEvent.agent.location [
       fhir:Reference.reference [ fhir:value "Location/1" ]
     ];
     fhir:AuditEvent.agent.policy [
       fhir:value "http://consent.com/yes";
       fhir:index 0
     ];
     fhir:AuditEvent.agent.networkString [ fhir:value "custodian.net" ]
  ], [
     fhir:index 1;
     fhir:AuditEvent.agent.type [
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://dicom.nema.org/resources/ontology/DCM" ];
         fhir:Coding.code [ fhir:value "110152" ];
         fhir:Coding.display [ fhir:value "Destination Role ID" ]
       ]
     ];
     fhir:AuditEvent.agent.who [
       fhir:Reference.reference [ fhir:value "Practitioner/example" ];
       fhir:Reference.display [ fhir:value "Where" ]
     ];
     fhir:AuditEvent.agent.requestor [ fhir:value "false"^^xsd:boolean ];
     fhir:AuditEvent.agent.networkString [ fhir:value "marketing.land" ];
     fhir:AuditEvent.agent.authorization [
       fhir:index 0;
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/v3-ActReason" ];
         fhir:Coding.code [ fhir:value "HMARKT" ];
         fhir:Coding.display [ fhir:value "healthcare marketing" ]
       ]
     ]
  ];
  fhir:AuditEvent.source [
     fhir:AuditEvent.source.observer [
       fhir:Reference.display [ fhir:value "Watchers Accounting of Disclosures Application" ]
     ];
     fhir:AuditEvent.source.type [
       fhir:index 0;
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/security-source-type" ];
         fhir:Coding.code [ fhir:value "4" ];
         fhir:Coding.display [ fhir:value "Application Server" ]
       ]
     ]
  ];
  fhir:AuditEvent.entity [
     fhir:index 0;
     fhir:AuditEvent.entity.what [
       fhir:Reference.reference [ fhir:value "Patient/example/_history/1" ];
       fhir:Reference.identifier [
         fhir:Identifier.value [ fhir:value "What.id" ]
       ];
       fhir:Reference.display [ fhir:value "data about Everthing important" ]
     ];
     fhir:AuditEvent.entity.role [
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/object-role" ];
         fhir:Coding.code [ fhir:value "4" ];
         fhir:Coding.display [ fhir:value "Domain Resource" ]
       ]
     ];
     fhir:AuditEvent.entity.securityLabel [
       fhir:index 0;
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/v3-Confidentiality" ];
         fhir:Coding.code [ fhir:value "V" ];
         fhir:Coding.display [ fhir:value "very restricted" ]
       ]
     ], [
       fhir:index 1;
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/v3-ActCode" ];
         fhir:Coding.code [ fhir:value "STD" ];
         fhir:Coding.display [ fhir:value "sexually transmitted disease information sensitivity" ]
       ]
     ], [
       fhir:index 2;
       fhir:CodeableConcept.coding [
         fhir:index 0;
         fhir:Coding.system [ fhir:value "http://terminology.hl7.org/CodeSystem/v3-ActCode" ];
         fhir:Coding.code [ fhir:value "DELAU" ];
         fhir:Coding.display [ fhir:value "delete after use" ]
       ]
     ]
  ]] .

# - ontology header ------------------------------------------------------------

[a owl:Ontology;
  owl:imports fhir:fhir.ttl] .

# -------------------------------------------------------------------------------------

Usage note: every effort has been made to ensure that the examples are correct and useful, but they are not a normative part of the specification.