FHIR Data Segmentation for Privacy
0.2.0 - STU 1 Ballot

This page is part of the FHIR Data Segmentation for Privacy (v0.1.0: STU 1 Ballot 1) based on FHIR R4. . For a full list of available versions, see the Directory of published versions

Value set definition for Privacy Policy - JSON Representation

(back to description)

Raw json

Source view

{
  "resourceType" : "ValueSet",
  "id" : "valueset-privacy-policy",
  "text" : {
    "status" : "generated",
    "div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><h2>Privacy Policy ValueSet</h2><div><p>Security label metadata that 'segments' an IT resource by conveying a mandate, obligation, requirement, rule, or expectation relating to its privacy.</p>\n</div><ul><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept  is-a  <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActConsentType\">_ActConsentType</a></li><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept  is-a  <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActConsentDirective\">_ActConsentDirective</a></li><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept  is-a  <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActPrivacyLaw\">_ActPrivacyLaw</a></li><li>Include these codes as defined in <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a><table class=\"none\"><tr><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCD\">GDPRCD</a></td><td>GDPR Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRResearchCD\">GDPRResearchCD</a></td><td>GDPR Research Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OIC\">OIC</a></td><td>opt-in to personal information or effect collection in a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OIS\">OIS</a></td><td>opt-in to personal information or effect sharing via a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OOC\">OOC</a></td><td>opt-out of personal information or effect collection in a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OOS\">OOS</a></td><td>opt-out of personal information or effect sharing via a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-42CFRPart2CD\">42CFRPart2CD</a></td><td>42 CFR Part 2 consent directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-CompoundResearchCD\">CompoundResearchCD</a></td><td>Compound HIPAA Research Authorization and Informed Consent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAAuthCD\">HIPAAAuthCD</a></td><td>HIPAA Authorization Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAConsentCD\">HIPAAConsentCD</a></td><td>HIPAA Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAResearchAuthCD\">HIPAAResearchAuthCD</a></td><td>HIPAA Authorization for Disclosure for Research Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAROAD\">HIPAAROAD</a></td><td>HIPAA Right of Access Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-InformedAssentCD\">InformedAssentCD</a></td><td>Informed Assent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-InformedConsentCD\">InformedConsentCD</a></td><td>Informed Consent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515\">MDHHS-5515</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515MMHC\">MDHHS-5515MMHC</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515Part2\">MDHHS-5515Part2</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisIP\">JurisIP</a></td><td>jurisdictional information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisCUI\">JurisCUI</a></td><td>jurisdictional controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisDEID\">JurisDEID</a></td><td>jurisdictional de-identified information poli</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisLDS\">JurisLDS</a></td><td>jurisdictional limited data set</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisNSI\">JurisNSI</a></td><td>jurisdictional non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisPI\">JurisPI</a></td><td>jurisdictional public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisSP-CUI\">JurisSP-CUI</a></td><td>jurisdictional specified controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisUUI\">JurisUUI</a></td><td>jurisdictional uncontrolled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgIP\">OrgIP</a></td><td>organizational information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgCUI\">OrgCUI</a></td><td>organizational basic controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgDEID\">OrgDEID</a></td><td>organizational de-identified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgLDS\">OrgLDS</a></td><td>organizational limited data set information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgNSI\">OrgNSI</a></td><td>organizational non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgPI\">OrgPI</a></td><td>organizational public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgSP-CUI\">OrgSP-CUI</a></td><td>Organizational policy on collection, access, use, or disclosure of specified controlled unclassified information as defined by the organization or by applicable jurisdictional law.</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgUUI\">OrgUUI</a></td><td>organizational uncontrolled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersIP\">PersIP</a></td><td>personal information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersDEID\">PersDEID</a></td><td>personal de-identified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersLDS\">PersLDS</a></td><td>personal limited data set information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersNSI\">PersNSI</a></td><td>personal non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersPI\">PersPI</a></td><td>personal public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCONSENT\">GDPRCONSENT</a></td><td>GDPR consent</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCONTRACT\">GDPRCONTRACT</a></td><td>GDPR contract</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGALCLAIM\">GDPRLEGALCLAIM</a></td><td>GDPR legal claim</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGALOBL\">GDPRLEGALOBL</a></td><td>GDPR legal obligation</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGITINTEREST\">GDPRLEGITINTEREST</a></td><td>GDPR legitimate interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRPUBLICHEALTH\">GDPRPUBLICHEALTH</a></td><td>GDPR public health</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRPUBLICINTEREST\">GDPRPUBLICINTEREST</a></td><td>GDPR public interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRRESEARCH\">GDPRRESEARCH</a></td><td>GDPR research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRHTHSOCSYS\">GDPRHTHSOCSYS</a></td><td>GDPR health or social system management</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRVITALINTEREST\">GDPRVITALINTEREST</a></td><td>GDPR vital interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-32CFRPart2002\">32CFRPart2002</a></td><td>32 CFR Part 2002</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAAuth\">HIPAAAuth</a></td><td>HIPAA Authorization for Disclosure</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAConsent\">HIPAAConsent</a></td><td>HIPAA Consent</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAROA\">HIPAAROA</a></td><td>HIPAA Right of Access</td><td/></tr></table></li></ul><p>This value set includes codes based on the following rules:</p></div>"
  },
  "url" : "http://hl7.org/fhir/uv/security-label-ds4p/ValueSet/valueset-privacy-policy",
  "version" : "0.2.0",
  "name" : "ValueSetPrivacyPolicy",
  "title" : "Privacy Policy ValueSet",
  "status" : "draft",
  "date" : "2020-03-30T00:00:00+00:00",
  "publisher" : "HL7 International - Security Work Group",
  "contact" : [
    {
      "telecom" : [
        {
          "system" : "url",
          "value" : "http://hl7.org/Special/committees/secure"
        }
      ]
    }
  ],
  "description" : "Security label metadata that 'segments' an IT resource by conveying a mandate, obligation, requirement, rule, or expectation relating to its privacy.",
  "jurisdiction" : [
    {
      "coding" : [
        {
          "system" : "http://unstats.un.org/unsd/methods/m49/m49.htm",
          "code" : "001"
        }
      ]
    }
  ],
  "compose" : {
    "include" : [
      {
        "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
        "filter" : [
          {
            "property" : "concept",
            "op" : "is-a",
            "value" : "_ActConsentType"
          }
        ]
      },
      {
        "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
        "filter" : [
          {
            "property" : "concept",
            "op" : "is-a",
            "value" : "_ActConsentDirective"
          }
        ]
      },
      {
        "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
        "filter" : [
          {
            "property" : "concept",
            "op" : "is-a",
            "value" : "_ActPrivacyLaw"
          }
        ]
      },
      {
        "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
        "concept" : [
          {
            "code" : "GDPRCD",
            "display" : "GDPR Consent Directive"
          },
          {
            "code" : "GDPRResearchCD",
            "display" : "GDPR Research Consent Directive"
          },
          {
            "code" : "OIC",
            "display" : "opt-in to personal information or effect collection in a registry or repository"
          },
          {
            "code" : "OIS",
            "display" : "opt-in to personal information or effect sharing via a registry or repository"
          },
          {
            "code" : "OOC",
            "display" : "opt-out of personal information or effect collection in a registry or repository"
          },
          {
            "code" : "OOS",
            "display" : "opt-out of personal information or effect sharing via a registry or repository"
          },
          {
            "code" : "42CFRPart2CD",
            "display" : "42 CFR Part 2 consent directive"
          },
          {
            "code" : "CompoundResearchCD",
            "display" : "Compound HIPAA Research Authorization and Informed Consent for Research"
          },
          {
            "code" : "HIPAAAuthCD",
            "display" : "HIPAA Authorization Consent Directive"
          },
          {
            "code" : "HIPAAConsentCD",
            "display" : "HIPAA Consent Directive"
          },
          {
            "code" : "HIPAAResearchAuthCD",
            "display" : "HIPAA Authorization for Disclosure for Research Consent Directive"
          },
          {
            "code" : "HIPAAROAD",
            "display" : "HIPAA Right of Access Directive"
          },
          {
            "code" : "InformedAssentCD",
            "display" : "Informed Assent for Research"
          },
          {
            "code" : "InformedConsentCD",
            "display" : "Informed Consent for Research"
          },
          {
            "code" : "MDHHS-5515",
            "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes"
          },
          {
            "code" : "MDHHS-5515MMHC",
            "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code"
          },
          {
            "code" : "MDHHS-5515Part2",
            "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2"
          },
          {
            "code" : "JurisIP",
            "display" : "jurisdictional information policy"
          },
          {
            "code" : "JurisCUI",
            "display" : "jurisdictional controlled unclassified information policy"
          },
          {
            "code" : "JurisDEID",
            "display" : "jurisdictional de-identified information poli"
          },
          {
            "code" : "JurisLDS",
            "display" : "jurisdictional limited data set"
          },
          {
            "code" : "JurisNSI",
            "display" : "jurisdictional non-sensitive information policy"
          },
          {
            "code" : "JurisPI",
            "display" : "jurisdictional public information policy"
          },
          {
            "code" : "JurisSP-CUI",
            "display" : "jurisdictional specified controlled unclassified information policy"
          },
          {
            "code" : "JurisUUI",
            "display" : "jurisdictional uncontrolled unclassified information policy"
          },
          {
            "code" : "OrgIP",
            "display" : "organizational information policy"
          },
          {
            "code" : "OrgCUI",
            "display" : "organizational basic controlled unclassified information policy"
          },
          {
            "code" : "OrgDEID",
            "display" : "organizational de-identified information policy"
          },
          {
            "code" : "OrgLDS",
            "display" : "organizational limited data set information policy"
          },
          {
            "code" : "OrgNSI",
            "display" : "organizational non-sensitive information policy"
          },
          {
            "code" : "OrgPI",
            "display" : "organizational public information policy"
          },
          {
            "code" : "OrgSP-CUI",
            "display" : "Organizational policy on collection, access, use, or disclosure of specified controlled unclassified information as defined by the organization or by applicable jurisdictional law."
          },
          {
            "code" : "OrgUUI",
            "display" : "organizational uncontrolled unclassified information policy"
          },
          {
            "code" : "PersIP",
            "display" : "personal information policy"
          },
          {
            "code" : "PersDEID",
            "display" : "personal de-identified information policy"
          },
          {
            "code" : "PersLDS",
            "display" : "personal limited data set information policy"
          },
          {
            "code" : "PersNSI",
            "display" : "personal non-sensitive information policy"
          },
          {
            "code" : "PersPI",
            "display" : "personal public information policy"
          },
          {
            "code" : "GDPRCONSENT",
            "display" : "GDPR consent"
          },
          {
            "code" : "GDPRCONTRACT",
            "display" : "GDPR contract"
          },
          {
            "code" : "GDPRLEGALCLAIM",
            "display" : "GDPR legal claim"
          },
          {
            "code" : "GDPRLEGALOBL",
            "display" : "GDPR legal obligation"
          },
          {
            "code" : "GDPRLEGITINTEREST",
            "display" : "GDPR legitimate interest"
          },
          {
            "code" : "GDPRPUBLICHEALTH",
            "display" : "GDPR public health"
          },
          {
            "code" : "GDPRPUBLICINTEREST",
            "display" : "GDPR public interest"
          },
          {
            "code" : "GDPRRESEARCH",
            "display" : "GDPR research"
          },
          {
            "code" : "GDPRHTHSOCSYS",
            "display" : "GDPR health or social system management"
          },
          {
            "code" : "GDPRVITALINTEREST",
            "display" : "GDPR vital interest"
          },
          {
            "code" : "32CFRPart2002",
            "display" : "32 CFR Part 2002"
          },
          {
            "code" : "HIPAAAuth",
            "display" : "HIPAA Authorization for Disclosure"
          },
          {
            "code" : "HIPAAConsent",
            "display" : "HIPAA Consent"
          },
          {
            "code" : "HIPAAROA",
            "display" : "HIPAA Right of Access"
          }
        ]
      }
    ]
  }
}