Example of using Provenance as De-Identifiation linkage with security tag protection, enabling Re-Identification with authorization. (id = "example-anon0")

<?xml version="1.0" encoding="UTF-8"?>

<Bundle xmlns="http://hl7.org/fhir">
  <id value="example-anon0"/> 
  <!--   a search bundle on anon0 patient by a HIGHLY Priviliaged User that is authorized
   to see linkage   -->
  <meta> 
    <lastUpdated value="2014-08-18T01:43:30Z"/> 
    <security> 
      <!--   Bundle confidentiality at high water mark of most sensitive   -->
      <system value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/> 
      <code value="V"/> 
    </security> 
    <security> 
      <system value="http://terminology.hl7.org/CodeSystem/v3-ObservationValue"/> 
      <code value="PSEUDED"/> 
    </security> 
  </meta> 
  <type value="searchset"/> 
  <link> 
    <relation value="self"/> 
    <url value="https://example.com/fhir/Patient/anon0/$everything"/> 
  </link> 
  <entry> 
    <fullUrl value="http://example.org/fhir/Provenance/anon0"/> 
    <resource> 
      <Provenance> 
        <!--   This Provenance shows a link between real-world and anon for a given patient
           -->
        <id value="anon0"/> 
        <meta> 
          <security> 
            <!--   Provenance is the link between real-world and anon, so is highest possible confidentiality
               -->
            <system value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/> 
            <code value="V"/> 
          </security> 
          <security> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-ObservationValue"/> 
            <code value="PSEUDED"/> 
          </security> 
        </meta> 
        <text> 
          <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b> Generated Narrative: Provenance anon0</b> </p> <a name="anon0"> </a> <a name="hcanon0"> </a> <a name="anon0-en-AU"> </a> <p> Provenance for <a href="broken-link.html">??</a> </p> <p> Summary</p> <table class="grid"><tr> <td> Recorded</td> <td> 2015-06-27T08:39:24+10:00</td> </tr> <tr> <td> Policy</td> <td> <a href="broken-link.html">http://example.org/policies/666</a> </td> </tr> <tr> <td> Activity</td> <td> <span title="Codes:{http://terminology.hl7.org/CodeSystem/iso-21089-lifecycle deidentify}">De-Identify (Anononymize) Record Lifecycle Event</span> </td> </tr> </table> <p> <b> Agents</b> </p> <table class="grid"><tr> <td> <b> Type</b> </td> <td> <b> who</b> </td> </tr> <tr> <td> <span title="Codes:{http://terminology.hl7.org/CodeSystem/provenance-participant-type assembler}">Assembler</span> </td> <td> Device/software</td> </tr> </table> </div> 
        </text> 
        <target> 
          <reference value="http://example.org/fhir/Patient/anon0"/> 
        </target> 
        <recorded value="2015-06-27T08:39:24+10:00"/> 
        <!--   policy would indicate the rules used for De-Identification, and appropriate purposes
         of use of the data   -->
        <policy value="http://example.org/policies/666"/> 
        <activity> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/iso-21089-lifecycle"/> 
            <code value="deidentify"/> 
          </coding> 
        </activity> 
        <!--   not identified in original patient compartment as should not show up there (confidentiatlty
        Code V protected too)   -->
        <agent> 
          <type> 
            <coding> 
              <system value="http://terminology.hl7.org/CodeSystem/provenance-participant-type"/> 
              <code value="assembler"/> 
            </coding> 
          </type> 
          <who> 
            <display value="Device/software"/> 
          </who> 
        </agent> 
        <entity> 
          <role value="source"/> 
          <what> 
            <reference value="Patient/example"/> 
          </what> 
        </entity> 
      </Provenance> 
    </resource> 
    <search> 
      <mode value="match"/> 
    </search> 
  </entry> 
  <entry> 
    <fullUrl value="http://example.org/fhir/Patient/anon0"/> 
    <resource> 
      <Patient> 
        <id value="anon0"/> 
        <!--   De-Identifed equivilant, removing all direct identifiers, and keeping only minimally
         necessary indirect identifiers   -->
        <meta> 
          <security> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/> 
            <code value="L"/> 
          </security> 
          <security> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-ObservationValue"/> 
            <code value="PSEUDED"/> 
          </security> 
        </meta> 
        <text> 
          <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b> Generated Narrative: Patient anon0</b> </p> <p style="border: 1px #661aff solid; background-color: #e6e6ff; padding: 10px;">First-0 Anon-0  male, DoB: 1974-12-01</p> <hr/>  </div> 
        </text> 
        <name> 
          <!--   some made up name   -->
          <family value="Anon-0"/> 
          <given value="First-0"/> 
        </name> 
        <!--   male/female gender is needed, and group is big enough.    -->
        <gender value="male"/> 
        <!--   birthdate is generalized to 1st of month of the birth year   -->
        <birthDate value="1974-12-01"/> 
      </Patient> 
    </resource> 
    <search> 
      <mode value="match"/> 
    </search> 
  </entry> 
  <entry> 
    <fullUrl value="http://example.org/fhir/Condition/anon0"/> 
    <resource> 
      <Condition> 
        <id value="anon0"/> 
        <!--   De-Identified data, change reference to Patient, eliminate free-text, and fuzz
         dates   -->
        <meta> 
          <security> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/> 
            <code value="L"/> 
          </security> 
          <security> 
            <system value="http://terminology.hl7.org/CodeSystem/v3-ObservationValue"/> 
            <code value="PSEUDED"/> 
          </security> 
        </meta> 
        <text> 
          <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b> Generated Narrative: Condition anon0</b> </p> <p> <b> clinicalStatus</b> : <span title="Codes:{http://terminology.hl7.org/CodeSystem/condition-clinical active}">Active</span> </p> <p> <b> verificationStatus</b> : <span title="Codes:{http://terminology.hl7.org/CodeSystem/condition-ver-status confirmed}">Confirmed</span> </p> <p> <b> category</b> : <span title="Codes:{http://terminology.hl7.org/CodeSystem/condition-category encounter-diagnosis},
               {http://snomed.info/sct 439401001}">Encounter Diagnosis</span> </p> <p> <b> severity</b> : <span title="Codes:{http://snomed.info/sct 24484000}">Severe</span> </p> <p> <b> code</b> : <span title="Codes:{http://snomed.info/sct 39065001}">Burn of ear</span> </p> <p> <b> bodySite</b> : <span title="Codes:{http://snomed.info/sct 49521004}">Left external ear structure</span> </p> <p> <b> subject</b> : <a href="broken-link.html">??</a> </p> <p> <b> onset</b> : 2012-05-01</p> </div> 
        </text> 
        <clinicalStatus> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/condition-clinical"/> 
            <code value="active"/> 
          </coding> 
        </clinicalStatus> 
        <verificationStatus> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/condition-ver-status"/> 
            <code value="confirmed"/> 
          </coding> 
        </verificationStatus> 
        <category> 
          <coding> 
            <system value="http://terminology.hl7.org/CodeSystem/condition-category"/> 
            <code value="encounter-diagnosis"/> 
            <display value="Encounter Diagnosis"/> 
          </coding> 
          <!--     and also a SNOMED CT coding     -->
          <coding> 
            <system value="http://snomed.info/sct"/> 
            <code value="439401001"/> 
            <display value="Diagnosis"/> 
          </coding> 
        </category> 
        <severity> 
          <coding> 
            <system value="http://snomed.info/sct"/> 
            <code value="24484000"/> 
            <display value="Severe"/> 
          </coding> 
        </severity> 
        <code> 
          <coding> 
            <system value="http://snomed.info/sct"/> 
            <code value="39065001"/> 
            <display value="Burn of ear"/> 
          </coding> 
        </code> 
        <bodySite> 
          <coding> 
            <system value="http://snomed.info/sct"/> 
            <code value="49521004"/> 
            <display value="Left external ear structure"/> 
          </coding> 
        </bodySite> 
        <subject> 
          <!--   patient as anon0 id   -->
          <reference value="Patient/anon0"/> 
        </subject> 
        <!--   dates aligned to first of month   -->
        <onsetDateTime value="2012-05-01"/> 
      </Condition> 
    </resource> 
    <search> 
      <mode value="match"/> 
    </search> 
  </entry> 
</Bundle>