Withhold or withdraw consent for disclosure to a specific provider organization (id = "consent-example-notOrg")

<?xml version="1.0" encoding="UTF-8"?>

<Consent xmlns="http://hl7.org/fhir">
  <id value="consent-example-notOrg"/> 
  <text> 
    <status value="generated"/> 
    <div xmlns="http://www.w3.org/1999/xhtml">
      <p> The following scenario is based on existing jurisdictional policy and are realized
         in existing systems in Canada. 
        The default policy is one of implied consent for the provision of care,
         so these scenarios all deal with withdrawal or withholding consent for that purpose.
         
        Withhold or withdraw consent for disclosure to a specific provider organization
         </p> 
      <p> Patient &quot;P. van de Heuvel&quot; ex-spouse is a Physician that is employed
         by Burgers University Medical Center.  
        P. decides that he would like to withdraw/withhold consent to disclose
         any instance of his health information to Burgers University Medical Center.</p> 
    </div> 
  </text> 
  <status value="active"/> 

  <category> 
    <coding> 
      <system value="http://loinc.org"/> 
      <code value="59284-0"/> 
    </coding> 
  </category> 
  <subject> 
    <reference value="Patient/f001"/> 
    <display value="P. van de Heuvel"/> 
  </subject> 
  <dateTime value="2018-12-24"/> 
  <controller> 
    <reference value="Organization/2.16.840.1.113883.19.5"/> 
  </controller> 
  <!--   the text terms of the consent in lawyer speak   -->
  <sourceAttachment> 
    <title value="The terms of the consent in lawyer speak."/> 
    <!--   likely use url pointer to common text   -->
  </sourceAttachment> 
  <!--   this is opt-in - e.g. everything approved unless otherwise stated   -->
  <regulatoryBasis> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/> 
      <code value="INFA"/> 
    </coding> 
  </regulatoryBasis> 
  <provision> 
    <type value="permit"/> 
    <provision> 
      <!--   no read or write access for this org   -->
      <type value="deny"/> 
      <actor> 
        <role> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-ParticipationType"/> 
            <code value="PRCP"/> 
            <!--   PRCP: recipient of the information   -->
          </coding> 
        </role> 
        <reference> 
          <reference value="Organization/f001"/> 
        </reference> 
      </actor> 
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="access"/> 
        </coding> 
      </action> 
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="correct"/> 
        </coding> 
      </action> 
    </provision> 
  </provision> 
</Consent>