Withhold or withdraw consent for disclosure to a specific provider agent (an individual within an organization) (id = "consent-example-notThem")

<?xml version="1.0" encoding="UTF-8"?>

<Consent xmlns="http://hl7.org/fhir">
  <id value="consent-example-notThem"/> 
  <text> 
    <status value="generated"/> 
    <div xmlns="http://www.w3.org/1999/xhtml">The following scenario is based on existing jurisdictional policy and are realized
       in existing systems in Canada. 
    The default policy is one of implied consent for the provision of care, so these
       scenarios all deal with withdrawal or withholding consent for that purpose. <p> 
    specific to use-case 4) Withhold or withdraw consent for disclosure to a specific
         provider agent (an individual within an organization) </p> 
  <p> Patient &quot;Eve Everywoman&quot;'s ex-spouse, Carla Espinosa is a Nurse that
         is employed by Burgers University Medical Center.
    Eve realizes that she may receive treatment at BUMC, however she does not want
         her ex-spouse to have any 
    access to her IIHI.  She indicates that she would like to withdraw/withhold
         consent to disclose any instance 
    of her health information to her ex-spouse as a result of her ex's employment
         at Burgers University Medical Center.
   </p> 
   </div> 
  </text> 
  <status value="active"/> 
  <category> 
    <coding> 
      <system value="http://loinc.org"/> 
      <code value="59284-0"/> 
    </coding> 
  </category> 
  <subject> 
    <reference value="Patient/mom"/> 
    <display value="Eve Everywoman"/> 
  </subject> 
  <date value="2018-12-24"/> 
  <controller> 
    <reference value="Organization/f001"/> 
  </controller> 
    <!--   the text terms of the consent in lawyer speak   -->
  <sourceAttachment> 
    <title value="The terms of the consent in lawyer speak."/> 
      <!--   likely use url pointer to common text   -->
  </sourceAttachment> 
    <!--   this is opt-in - e.g. everything approved unless otherwise stated   -->
  <regulatoryBasis> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/> 
      <code value="INFA"/> 
    </coding> 
  </regulatoryBasis> 
  <verification> 
    <verified value="true"/> 
    <verifiedBy> 
      <reference value="Organization/f001"/> 
    </verifiedBy> 
    <verifiedWith> 
      <reference value="RelatedPerson/benedicte"/> 
    </verifiedWith> 
    <verificationDate value="2021-11-11"/> 
  </verification> 
  <provision> 
    <type value="permit"/> 
    <provision> 
        <!--   no read or write access for this individual   -->
      <type value="deny"/> 
      <actor> 
        <role> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-ParticipationType"/> 
            <code value="PRCP"/> 
              <!--   PRCP: recipient of the information   -->
          </coding> 
        </role> 
        <reference> 
          <reference value="Practitioner/f204"/> 
          <display value="Carla Espinosa"/> 
        </reference> 
      </actor> 
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="access"/> 
        </coding> 
      </action> 
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="correct"/> 
        </coding> 
      </action> 
    </provision> 
  </provision> 
</Consent>