This page is part of the FHIR Data Segmentation for Privacy (v0.1.0: STU 1 Ballot 1) based on FHIR R4. . For a full list of available versions, see the Directory of published versions
Source view
{ "resourceType" : "ValueSet", "id" : "valueset-privacy-policy", "text" : { "status" : "generated", "div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><h2>Privacy Policy ValueSet</h2><div><p>Security label metadata that 'segments' an IT resource by conveying a mandate, obligation, requirement, rule, or expectation relating to its privacy.</p>\n</div><ul><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept is-a <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActConsentType\">_ActConsentType</a></li><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept is-a <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActConsentDirective\">_ActConsentDirective</a></li><li>Include codes from <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept is-a <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-_ActPrivacyLaw\">_ActPrivacyLaw</a></li><li>Include these codes as defined in <a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html\"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a><table class=\"none\"><tr><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCD\">GDPRCD</a></td><td>GDPR Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRResearchCD\">GDPRResearchCD</a></td><td>GDPR Research Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OIC\">OIC</a></td><td>opt-in to personal information or effect collection in a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OIS\">OIS</a></td><td>opt-in to personal information or effect sharing via a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OOC\">OOC</a></td><td>opt-out of personal information or effect collection in a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OOS\">OOS</a></td><td>opt-out of personal information or effect sharing via a registry or repository</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-42CFRPart2CD\">42CFRPart2CD</a></td><td>42 CFR Part 2 consent directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-CompoundResearchCD\">CompoundResearchCD</a></td><td>Compound HIPAA Research Authorization and Informed Consent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAAuthCD\">HIPAAAuthCD</a></td><td>HIPAA Authorization Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAConsentCD\">HIPAAConsentCD</a></td><td>HIPAA Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAResearchAuthCD\">HIPAAResearchAuthCD</a></td><td>HIPAA Authorization for Disclosure for Research Consent Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAROAD\">HIPAAROAD</a></td><td>HIPAA Right of Access Directive</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-InformedAssentCD\">InformedAssentCD</a></td><td>Informed Assent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-InformedConsentCD\">InformedConsentCD</a></td><td>Informed Consent for Research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515\">MDHHS-5515</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515MMHC\">MDHHS-5515MMHC</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-MDHHS-5515Part2\">MDHHS-5515Part2</a></td><td>Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisIP\">JurisIP</a></td><td>jurisdictional information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisCUI\">JurisCUI</a></td><td>jurisdictional controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisDEID\">JurisDEID</a></td><td>jurisdictional de-identified information poli</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisLDS\">JurisLDS</a></td><td>jurisdictional limited data set</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisNSI\">JurisNSI</a></td><td>jurisdictional non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisPI\">JurisPI</a></td><td>jurisdictional public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisSP-CUI\">JurisSP-CUI</a></td><td>jurisdictional specified controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-JurisUUI\">JurisUUI</a></td><td>jurisdictional uncontrolled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgIP\">OrgIP</a></td><td>organizational information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgCUI\">OrgCUI</a></td><td>organizational basic controlled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgDEID\">OrgDEID</a></td><td>organizational de-identified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgLDS\">OrgLDS</a></td><td>organizational limited data set information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgNSI\">OrgNSI</a></td><td>organizational non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgPI\">OrgPI</a></td><td>organizational public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgSP-CUI\">OrgSP-CUI</a></td><td>Organizational policy on collection, access, use, or disclosure of specified controlled unclassified information as defined by the organization or by applicable jurisdictional law.</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-OrgUUI\">OrgUUI</a></td><td>organizational uncontrolled unclassified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersIP\">PersIP</a></td><td>personal information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersDEID\">PersDEID</a></td><td>personal de-identified information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersLDS\">PersLDS</a></td><td>personal limited data set information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersNSI\">PersNSI</a></td><td>personal non-sensitive information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-PersPI\">PersPI</a></td><td>personal public information policy</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCONSENT\">GDPRCONSENT</a></td><td>GDPR consent</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRCONTRACT\">GDPRCONTRACT</a></td><td>GDPR contract</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGALCLAIM\">GDPRLEGALCLAIM</a></td><td>GDPR legal claim</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGALOBL\">GDPRLEGALOBL</a></td><td>GDPR legal obligation</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRLEGITINTEREST\">GDPRLEGITINTEREST</a></td><td>GDPR legitimate interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRPUBLICHEALTH\">GDPRPUBLICHEALTH</a></td><td>GDPR public health</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRPUBLICINTEREST\">GDPRPUBLICINTEREST</a></td><td>GDPR public interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRRESEARCH\">GDPRRESEARCH</a></td><td>GDPR research</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRHTHSOCSYS\">GDPRHTHSOCSYS</a></td><td>GDPR health or social system management</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-GDPRVITALINTEREST\">GDPRVITALINTEREST</a></td><td>GDPR vital interest</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-32CFRPart2002\">32CFRPart2002</a></td><td>32 CFR Part 2002</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAAuth\">HIPAAAuth</a></td><td>HIPAA Authorization for Disclosure</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAConsent\">HIPAAConsent</a></td><td>HIPAA Consent</td><td/></tr><tr><td><a href=\"http://hl7.org/fhir/R4/v3/ActCode/cs.html#v3-ActCode-HIPAAROA\">HIPAAROA</a></td><td>HIPAA Right of Access</td><td/></tr></table></li></ul><p>This value set includes codes based on the following rules:</p></div>" }, "url" : "http://hl7.org/fhir/uv/security-label-ds4p/ValueSet/valueset-privacy-policy", "version" : "0.2.0", "name" : "ValueSetPrivacyPolicy", "title" : "Privacy Policy ValueSet", "status" : "draft", "date" : "2020-03-30T00:00:00+00:00", "publisher" : "HL7 International - Security Work Group", "contact" : [ { "telecom" : [ { "system" : "url", "value" : "http://hl7.org/Special/committees/secure" } ] } ], "description" : "Security label metadata that 'segments' an IT resource by conveying a mandate, obligation, requirement, rule, or expectation relating to its privacy.", "jurisdiction" : [ { "coding" : [ { "system" : "http://unstats.un.org/unsd/methods/m49/m49.htm", "code" : "001" } ] } ], "compose" : { "include" : [ { "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode", "filter" : [ { "property" : "concept", "op" : "is-a", "value" : "_ActConsentType" } ] }, { "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode", "filter" : [ { "property" : "concept", "op" : "is-a", "value" : "_ActConsentDirective" } ] }, { "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode", "filter" : [ { "property" : "concept", "op" : "is-a", "value" : "_ActPrivacyLaw" } ] }, { "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode", "concept" : [ { "code" : "GDPRCD", "display" : "GDPR Consent Directive" }, { "code" : "GDPRResearchCD", "display" : "GDPR Research Consent Directive" }, { "code" : "OIC", "display" : "opt-in to personal information or effect collection in a registry or repository" }, { "code" : "OIS", "display" : "opt-in to personal information or effect sharing via a registry or repository" }, { "code" : "OOC", "display" : "opt-out of personal information or effect collection in a registry or repository" }, { "code" : "OOS", "display" : "opt-out of personal information or effect sharing via a registry or repository" }, { "code" : "42CFRPart2CD", "display" : "42 CFR Part 2 consent directive" }, { "code" : "CompoundResearchCD", "display" : "Compound HIPAA Research Authorization and Informed Consent for Research" }, { "code" : "HIPAAAuthCD", "display" : "HIPAA Authorization Consent Directive" }, { "code" : "HIPAAConsentCD", "display" : "HIPAA Consent Directive" }, { "code" : "HIPAAResearchAuthCD", "display" : "HIPAA Authorization for Disclosure for Research Consent Directive" }, { "code" : "HIPAAROAD", "display" : "HIPAA Right of Access Directive" }, { "code" : "InformedAssentCD", "display" : "Informed Assent for Research" }, { "code" : "InformedConsentCD", "display" : "Informed Consent for Research" }, { "code" : "MDHHS-5515", "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes" }, { "code" : "MDHHS-5515MMHC", "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code" }, { "code" : "MDHHS-5515Part2", "display" : "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2" }, { "code" : "JurisIP", "display" : "jurisdictional information policy" }, { "code" : "JurisCUI", "display" : "jurisdictional controlled unclassified information policy" }, { "code" : "JurisDEID", "display" : "jurisdictional de-identified information poli" }, { "code" : "JurisLDS", "display" : "jurisdictional limited data set" }, { "code" : "JurisNSI", "display" : "jurisdictional non-sensitive information policy" }, { "code" : "JurisPI", "display" : "jurisdictional public information policy" }, { "code" : "JurisSP-CUI", "display" : "jurisdictional specified controlled unclassified information policy" }, { "code" : "JurisUUI", "display" : "jurisdictional uncontrolled unclassified information policy" }, { "code" : "OrgIP", "display" : "organizational information policy" }, { "code" : "OrgCUI", "display" : "organizational basic controlled unclassified information policy" }, { "code" : "OrgDEID", "display" : "organizational de-identified information policy" }, { "code" : "OrgLDS", "display" : "organizational limited data set information policy" }, { "code" : "OrgNSI", "display" : "organizational non-sensitive information policy" }, { "code" : "OrgPI", "display" : "organizational public information policy" }, { "code" : "OrgSP-CUI", "display" : "Organizational policy on collection, access, use, or disclosure of specified controlled unclassified information as defined by the organization or by applicable jurisdictional law." }, { "code" : "OrgUUI", "display" : "organizational uncontrolled unclassified information policy" }, { "code" : "PersIP", "display" : "personal information policy" }, { "code" : "PersDEID", "display" : "personal de-identified information policy" }, { "code" : "PersLDS", "display" : "personal limited data set information policy" }, { "code" : "PersNSI", "display" : "personal non-sensitive information policy" }, { "code" : "PersPI", "display" : "personal public information policy" }, { "code" : "GDPRCONSENT", "display" : "GDPR consent" }, { "code" : "GDPRCONTRACT", "display" : "GDPR contract" }, { "code" : "GDPRLEGALCLAIM", "display" : "GDPR legal claim" }, { "code" : "GDPRLEGALOBL", "display" : "GDPR legal obligation" }, { "code" : "GDPRLEGITINTEREST", "display" : "GDPR legitimate interest" }, { "code" : "GDPRPUBLICHEALTH", "display" : "GDPR public health" }, { "code" : "GDPRPUBLICINTEREST", "display" : "GDPR public interest" }, { "code" : "GDPRRESEARCH", "display" : "GDPR research" }, { "code" : "GDPRHTHSOCSYS", "display" : "GDPR health or social system management" }, { "code" : "GDPRVITALINTEREST", "display" : "GDPR vital interest" }, { "code" : "32CFRPart2002", "display" : "32 CFR Part 2002" }, { "code" : "HIPAAAuth", "display" : "HIPAA Authorization for Disclosure" }, { "code" : "HIPAAConsent", "display" : "HIPAA Consent" }, { "code" : "HIPAAROA", "display" : "HIPAA Right of Access" } ] } ] } }