<status value="active"/> <experimental value="false"/> <date value="2025-09-01T22:36:17.037718+10:00"/> <publisher value="FHIR Infrastructure"/> <contact> <name value="FHIR Infrastructure"/> <telecom> <system value="url"/> <value value="http://www.hl7.org/Special/committees/fiwg"/> </telecom> </contact> <description value="This cross-version ValueSet represents concepts from http://hl7.org/fhir/ValueSet/resource-security-category|4.0.1 for use in FHIR R4B. Concepts not present here have direct `equivalent` mappings crossing all versions from R4 to R4B."/> <jurisdiction> <coding> <system value="http://unstats.un.org/unsd/methods/m49/m49.htm"/> <code value="001"/> <display value="World"/> </coding> </jurisdiction> <compose> <include> <system value="http://terminology.hl7.org/CodeSystem/resource-security-category"/> <version value="4.0.1"/> <concept> <code value="anonymous"/> <display value="Anonymous READ Access Resource"/> </concept> <concept> <code value="individual"/> <display value="Individual Sensitive Resource"/> </concept> <concept> <code value="not-classified"/> <display value="Not classified"/> </concept> </include> </compose> <expansion> <timestamp value="2025-09-01T22:36:17.037719+10:00"/> <contains> <system value="http://terminology.hl7.org/CodeSystem/resource-security-category"/> <version value="4.0.1"/> <code value="anonymous"/> <display value="Anonymous READ Access Resource"/> </contains> <contains> <system value="http://terminology.hl7.org/CodeSystem/resource-security-category"/> <version value="4.0.1"/> <code value="individual"/> <display value="Individual Sensitive Resource"/> </contains> <contains> <system value="http://terminology.hl7.org/CodeSystem/resource-security-category"/> <version value="4.0.1"/> <code value="not-classified"/> <display value="Not classified"/> </contains> </expansion> </ValueSet>

Generated Narrative: ValueSet R4-resource-security-category-for-R4B

This value set expansion contains 3 concepts.

Code	System	Display	Definition
anonymous	http://terminology.hl7.org/CodeSystem/resource-security-category	Anonymous READ Access Resource	These resources tend to not contain any individual data, or business sensitive data. Most often these Resources will be available for anonymous access, meaning there is no access control based on the user or system requesting. However these Resources do tend to contain important information that must be authenticated back to the source publishing them, and protected from integrity failures in communication. For this reason server authenticated https (TLS) is recommended to provide authentication of the server and integrity protection in transit. This is normal web-server use of https.
individual	http://terminology.hl7.org/CodeSystem/resource-security-category	Individual Sensitive Resource	These Resources do NOT contain Patient data, but do contain individual information about other participants. These other individuals are Practitioners, PractionerRole, CareTeam, or other users. These identities are needed to enable the practice of healthcare. These identities are identities under general privacy regulations, and thus must consider Privacy risk. Often access to these other identities are covered by business relationships. For this purpose access to these Resources will tend to be Role specific using methods such as RBAC or ABAC.
not-classified	http://terminology.hl7.org/CodeSystem/resource-security-category	Not classified	Some Resources can be used for a wide scope of use-cases that span very sensitive to very non-sensitive. These Resources do not fall into any of the above classifications, as their sensitivity is highly variable. These Resources will need special handling. These Resources often contain metadata that describes the content in a way that can be used for Access Control decisions.