Extensions for Using Data Elements from FHIR R5 in FHIR R4 - Downloaded Version null See the Directory of published versions
| Page standards status: Trial-use | Maturity Level: 0 |
@prefix fhir: <http://hl7.org/fhir/> . @prefix owl: <http://www.w3.org/2002/07/owl#> . @prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> . @prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> . @prefix xsd: <http://www.w3.org/2001/XMLSchema#> . # - resource ------------------------------------------------------------------- a fhir:ValueSet ; fhir:nodeRole fhir:treeRoot ; fhir:id [ fhir:v "R5-v3-PrivacyMark-for-R4"] ; # fhir:text [ fhir:status [ fhir:v "generated" ] ; fhir:div [ fhir:v "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: ValueSet R5-v3-PrivacyMark-for-R4</b></p><a name=\"R5-v3-PrivacyMark-for-R4\"> </a><a name=\"hcR5-v3-PrivacyMark-for-R4\"> </a><p>This value set expansion contains 21 concepts.</p><table class=\"codes\"><tr><td><b>System</b></td><td><b>Version</b></td><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CONTROLLED\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CONTROLLED\">CONTROLLED</a></td><td>CONTROLLED</td><td><div><p>A displayed mark, required to be rendered as \"CONTROLLED\", indicating that the electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Mandatory control marking, which must be displayed on the top portion of each rendered or printed page containing controlled information. Should be displayed at the bottom of each rendered or printed page containing controlled information. Must be displayed on each portion of controlled information at the portion level if portions are uncontrolled unclassified information. Based on CUI Marking Handbook https://www.archives.gov/files/cui/20161206-cui-marking-handbook-v1-1.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-COPYMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-COPYMark\">COPYMark</a></td><td>copy of original mark</td><td><div><p>A displayed mark indicating that the electronic or hardcopy information is a copy of an authoritative source for the information. The copy is not considered authoritative but is a duplicate of the authoritative content.</p>\n<p><em>Usage Note:</em> Applicable policy will dictate how the COPY mark will be displayed. Typical renderings include the marking appearing at the top or \"banner\" of electronic or hardcopy pages, or as watermarks set diagonally across each page.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUI\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUI\">CUI</a></td><td>CUI</td><td><div><p>A displayed mark, required to be rendered as \"CUI\", indicating that the electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Mandatory control marking, which must be displayed on the top portion of each rendered or printed page containing controlled information. Should be displayed at the bottom of each rendered or printed page containing controlled information. Must be displayed on each portion of controlled information at the portion level if portions are uncontrolled unclassified information. Based on CUI Marking Handbook https://www.archives.gov/files/cui/20161206-cui-marking-handbook-v1-1.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUIHLTH\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUIHLTH\">CUIHLTH</a></td><td>CUI//HLTH</td><td><div><p>A displayed mark, required to be rendered as \"CUI//HLTH\", indicating that the electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of healthcare regulation governing CUI Basic marking include HIPAA Unique Identifier provisions 42 USC 1320d-2 note(b) https://www.govinfo.gov/content/pkg/USCODE-2016-title42/pdf/USCODE-2016-title42-chap7-subchapXI-partC-sec1320d-2.pdf; Title 38 Section 7332 https://www.govinfo.gov/content/pkg/USCODE-2016-title38/pdf/USCODE-2016-title38-partV-chap73-subchapIII-sec7332.pdf; and several sections of 42 CFR Part 2.related to consent and confidentiality, e.g., https://www.govinfo.gov/content/pkg/CFR-2017-title42-vol1/pdf/CFR-2017-title42-vol1-sec2-12.pdf</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUIHLTHP\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUIHLTHP\">CUIHLTHP</a></td><td>(CUI//HLTH)</td><td><div><p>A displayed mark, required to be rendered as \"(CUI//HLTH)\", indicating that a portion of an electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of healthcare regulation governing CUI Basic marking include HIPAA Unique Identifier provisions 42 USC 1320d-2 note(b) https://www.govinfo.gov/content/pkg/USCODE-2016-title42/pdf/USCODE-2016-title42-chap7-subchapXI-partC-sec1320d-2.pdf; Title 38 Section 7332 https://www.govinfo.gov/content/pkg/USCODE-2016-title38/pdf/USCODE-2016-title38-partV-chap73-subchapIII-sec7332.pdf; and several sections of 42 CFR Part 2.related to consent and confidentiality, e.g., https://www.govinfo.gov/content/pkg/CFR-2017-title42-vol1/pdf/CFR-2017-title42-vol1-sec2-12.pdf</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUIP\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUIP\">CUIP</a></td><td>(CUI)</td><td><div><p>A displayed mark, required to be rendered as \"(CUI)\", indicating that a portion of an electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of healthcare regulation governing CUI Basic marking include HIPAA Unique Identifier provisions 42 USC 1320d-2 note(b) https://www.govinfo.gov/content/pkg/USCODE-2016-title42/pdf/USCODE-2016-title42-chap7-subchapXI-partC-sec1320d-2.pdf; Title 38 Section 7332 https://www.govinfo.gov/content/pkg/USCODE-2016-title38/pdf/USCODE-2016-title38-partV-chap73-subchapIII-sec7332.pdf; and several sections of 42 CFR Part 2.related to consent and confidentiality, e.g., https://www.govinfo.gov/content/pkg/CFR-2017-title42-vol1/pdf/CFR-2017-title42-vol1-sec2-12.pdf</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUIPRVCY\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUIPRVCY\">CUIPRVCY</a></td><td>CUI//PRVCY</td><td><div><p>A displayed mark, required to be rendered as \"CUI//PRVCY\", indicating that the electronic or hardcopy controlled unclassified basic privacy information is private and must be protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of privacy regulation governing CUI Basic marking include 20 CFR 401.100 related to SSA disclosure of personal, program, and non-program information. https://www.govinfo.gov/content/pkg/CFR-2017-title20-vol2/pdf/CFR-2017-title20-vol2-sec401-100.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUIPRVCYP\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUIPRVCYP\">CUIPRVCYP</a></td><td>(CUI//PRVCY)</td><td><div><p>A displayed mark, required to be rendered as \"(CUI//PRVCY)\", indicating that a portion of an electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of privacy regulation governing CUI Basic marking include 20 CFR 401.100 related to SSA disclosure of personal, program, and non-program information. https://www.govinfo.gov/content/pkg/CFR-2017-title20-vol2/pdf/CFR-2017-title20-vol2-sec401-100.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUISP-HLTH\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUISP-HLTH\">CUISP-HLTH</a></td><td>CUI//SP-HLTH</td><td><div><p>A displayed mark, required to be rendered as \"CUI//SP-HLTH\", indicating that the electronic or hardcopy information is protected at the level of the subset of CUI in which the authorizing law, regulation, or Government-wide policy contains specific handling controls that it requires or permits agencies to use that differ from those for CUI Basic. The CUI Registry indicates which laws, regulations, and Government-wide policies include such specific requirements. CUI Specified controls may be more stringent than, or may simply differ from, those required by CUI Basic; the distinction is that the underlying authority spells out the controls for CUI Specified information and does not for CUI Basic information. CUI Basic controls apply to those aspects of CUI Specified where the authorizing laws, regulations, and Government-wide policies do not provide specific guidance. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of healthcare regulation governing CUI Specified marking include HIPAA Transaction and Code Sets and references the Congressional requirement that HHS promulgate Privacy, and Security rules https://www.govinfo.gov/content/pkg/USCODE-2016-title42/pdf/USCODE-2016-title42-chap7-subchapXI-partC-sec1320d-2.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUISP-HLTHP\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUISP-HLTHP\">CUISP-HLTHP</a></td><td>(CUI//SP-HLTH)</td><td><div><p>A displayed mark, required to be rendered as \"(CUI//SP-HLTH)\", indicating that a portion of an electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of healthcare regulation governing CUI Specified marking include HIPAA Transaction and Code Sets and references the Congressional requirement that HHS promulgate Privacy, and Security rules https://www.govinfo.gov/content/pkg/USCODE-2016-title42/pdf/USCODE-2016-title42-chap7-subchapXI-partC-sec1320d-2.pdf</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUISP-PRVCY\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUISP-PRVCY\">CUISP-PRVCY</a></td><td>CUI//SP-PRVCY</td><td><div><p>A displayed mark, required to be rendered as \"CUI//SP-PRVCY\", indicating that the electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of privacy regulation governing CUI Specified marking is OMB M-17-12ï‡? This Memorandum sets forth the policy for Federal agencies to prepare for and respond to a breach of personally identifiable information (PII). It includes a framework for assessing and mitigating the risk of harm to individuals potentially affected by a breach, as well as guidance on whether and how to provide notification and services to those individuals. https://www.whitehouse.gov/sites/whitehouse.gov/files/omb/memoranda/2017/m-17-12_0.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-CUISP-PRVCYP\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-CUISP-PRVCYP\">CUISP-PRVCYP</a></td><td>(CUI//SP-PRVCY)</td><td><div><p>A displayed mark, required to be rendered as \"(CUI//SP-PRVCY)\", indicating that a portion of an electronic or hardcopy information is protected at the level of the subset of CUI for which the authorizing law, regulation, or Government-wide policy does not set out specific handling or dissemination controls. Agencies handle CUI Basic according to the uniform set of controls set forth in this part and the CUI Registry. CUI Basic differs from CUI Specified (see definition for CUI Specified), and CUI Basic controls apply whenever CUI Specified ones do not cover the involved CUI. From CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n<p><em>Usage Note:</em> Examples of privacy regulation governing CUI Specified marking is OMB M-17-12ï‡? This Memorandum sets forth the policy for Federal agencies to prepare for and respond to a breach of personally identifiable information (PII). It includes a framework for assessing and mitigating the risk of harm to individuals potentially affected by a breach, as well as guidance on whether and how to provide notification and services to those individuals. https://www.whitehouse.gov/sites/whitehouse.gov/files/omb/memoranda/2017/m-17-12_0.pdf.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-ConfidentialMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-ConfidentialMark\">ConfidentialMark</a></td><td>confidential mark</td><td><div><p>A displayed mark rendered as \"Confidential\", which indicates to end users that the electronic or hardcopy information they are viewing must be protected at a level of protection as dictated by applicable policy.</p>\n<p>May be used to indicate proprietary or classified information that is, for example, business, intelligence, or project related, e.g., secret ingredients in a therapeutic substance; location of disaster health facilities and providers, or the name of a manufacturer or project contractor. Example use cases include a display to alert authorized business system users that they are viewing additionally protected proprietary and business confidential information deemed proprietary under an applicable jurisdictional or organizational policy.</p>\n<p><em>Usage Note:</em></p>\n<p>The ConfidentialMark (confidential mark) description is based on the HL7 Confidentiality Concept Domain: Types of privacy metadata classifying an IT resource (data, information object, service, or system capability) according to its level of sensitivity, which is based on an analysis of applicable privacy policies and the risk of financial, reputational, or other harm to an individual or entity that could result if made available or disclosed to unauthorized individuals, entities, or processes.</p>\n<p><em>Usage Note:</em> Confidentiality codes may be used in security labels and privacy markings to classify IT resources based on sensitivity to indicate the obligation of a custodian or receiver to ensure that the protected resource is not made available or disclosed to individuals, entities, or processes (security principals) unless authorized per applicable policies. Confidentiality codes may also be used in the clearances of initiators requesting access to protected resources.</p>\n<p>Map: Definition aligns with ISO 7498-2:1989 - Confidentiality is the property that information is not made available or disclosed to unauthorized individuals, entities, or processes.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-ControlledUnclassifiedInformation\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-ControlledUnclassifiedInformation\">ControlledUnclassifiedInformation</a></td><td>ControlledUnclassifiedInformation</td><td><div><p>Information the US Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. However, CUI does not include classified information (see definition above) or information a non-executive branch entity possesses and maintains in its own systems that did not come from, or was not created or possessed by or for, an executive branch agency or an entity acting for an agency. Law, regulation, or Government-wide policy may require or permit safeguarding or dissemination controls in three ways: Requiring or permitting agencies to control or protect the information but providing no specific controls, which makes the information CUI Basic; requiring or permitting agencies to control or protect the information and providing specific controls for doing so, which makes the information CUI Specified; or requiring or permitting agencies to control the information and specifying only some of those controls, which makes the information CUI Specified, but with CUI Basic controls where the authority does not specify. Based on CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html .</p>\n<p><em>Usage Note:</em> Mandatory control marking, which must be displayed on the top portion of each rendered or printed page containing controlled information. Should be displayed at the bottom of each rendered or printed page containing controlled information. Must be displayed on each portion of controlled information at the portion level if portions are uncontrolled unclassified information. Based on CUI Marking Handbook https://www.archives.gov/files/cui/20161206-cui-marking-handbook-v1-1.pdf. For definitions of key terms see CUI Glossary https://www.archives.gov/cui/registry/cui-glossary.html.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-DRAFTMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-DRAFTMark\">DRAFTMark</a></td><td>Draft Mark</td><td><div><p>A displayed mark indicating that the electronic or hard-copy information is still under development and is not yet considered to be ready for normal use.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-DeliverToAddresseeOnlyMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-DeliverToAddresseeOnlyMark\">DeliverToAddresseeOnlyMark</a></td><td>deliver only to addressee mark</td><td><div><p>A displayed mark on an electronic transmission or physical container such as an electronic transmittal wrapper, batch file, message header, or a physical envelop or package indicating that the contents, whether electronic or hardcopy information, must only be delivered to the authorized recipient(s) named in the address.</p>\n<p><em>Usage Note:</em> Required by US 32 CRF Part 2002 for container storing or transmitting CUI.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-PrivacyMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-PrivacyMark\">PrivacyMark</a></td><td>privacy mark</td><td><div><p>An abstract code for human readable marks indicating, e.g., the level of confidentiality protection, an authorized compartment, the integrity, or the handling instruction required by applicable policy. Such markings must be displayed as directed by applicable policy on electronically rendered information content and any electronic transmittal envelope or container; or on hardcopy information and any physical transmittal envelope or container.</p>\n<p>Examples of protocols for marking displays on electronic or hardcopy rendered content: Across the top or \"banner\" of each page ; as a watermark placed diagonally cross each page; at the bottom or \"footer\" of each page; and may be displayed at the beginning of any portion within the content that required markings different than other portions of the content. The banner or top of page marking typically acts as a \"high watermark\" by including all of the markings made on any marked portions within the entirety of the information content.</p>\n<p><em>Usage Note:</em> A \"Privacy Mark\" is a Security Control Observation (SECCONOBS) named tag set as specified by the HL7 Privacy and Security Classification System (HCS). A Privacy Mark Named Tag Set is valued with a Privacy Mark leaf code \"tag\", which is a member of the Security Control Observation Value (_SecurityObservationValue) tag set. Related Security Control Observation named tag sets are Purpose of Use, Obligation Policy, and Refrain Policy, each with their own Security Control Observation Value tag sets.</p>\n<p>Foundational standard definitions: ISO 22600-3 Section A.3.4.3 - If present, the privacy-mark is not used for access control. The content of the privacy-mark may be defined by the security policy in force (identified by the security-policy-identifier) which may define a list of values to be used. Alternately, the value may be determined by the originator of the security-label. IEEE Security Glossary Compendium 93- CESG Memorandum No.1 Issue 1.2 Oct 1992 - Human readable word or phrase acting as an indicator of all or part of the security constraints that apply to a document so marked. NOTE: A machine readable representation of a marking.</p>\n<p><em>Comment:</em> While policies requiring creators, processors, custodians, senders or recipients apply, enforce, and persist applicable Privacy Marks may be dictated by a jurisdiction, organization or personal privacy, security, or integrity policy, those required to comply may be governed under different policies, so compliance may need to be enforced through trust contracts. For example, information content marked with GDPR related policies may require adherence by processors or recipients outside of the European Union. For this reason, this code system is likely to evolve with the inclusion of multiple policy domains needing to communicate encoded policies in a standard, interoperable manner.</p>\n</div></td></tr><tr><td><a name=\"R5-v3-PrivacyMark-for-R4-http://terminology.hl7.org/CodeSystem/v3-ActCode-RedisclosureProhibitionMark\"> </a><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></td><td>8.0.0</td><td style=\"white-space:nowrap\"> <a href=\"CodeSystem-v3-ActCode.html#v3-ActCode-RedisclosureProhibitionMark\">RedisclosureProhibitionMark</a></td><td>prohibition against redisclosure mark</td><td><div><p>A displayed mark rendered to end users as a prescribed text warning that the electronic or hardcopy information shall not be further disclosed without consent of the subject of the information. For example, in order to warn a recipient of 42 CFR Part 2 information of the redisclosure restrictions, the rule mandates that end users receive a written prohibition against redisclosure unless authorized by patient consent or otherwise permitted by Part 2. See 42 CFR  2.32 Prohibition on re-disclosure. (a)Notice to accompany disclosure. Each disclosure made with the patient's written consent must be accompanied by one of the following written statements: (1) This information has been disclosed to you from records protected by federal confidentiality rules ( 42 CFR part 2). The federal rules prohibit you from making any further disclosure of information in this record that identifies a patient as having or having had a substance use disorder either directly, by reference to publicly available information, or through verification of such identification by another person unless further disclosure is expressly permitted by the written consent of the individual whose information is being disclosed or as otherwise permitted by 42 CFR part 2. A general authorization for the release of medical or other information is NOT sufficient for this purpose (see  2.32 Prohibition on re-disclosure. (a)Notice to accompany disclosure. Each disclosure made with the patient's written consent must be accompanied by one of the following written statements: (1) This information has been disclosed to you from records protected by federal confidentiality rules ( 42 CFR part 2). The federal rules prohibit you from making any further disclosure of information in this record that identifies a patient as having or having had a substance use disorder either directly, by reference to publicly available information, or through verification of such identification by another person unless further disclosure is expressly permitted by the written consent of the individual whose information is being disclosed or as otherwise permitted by 42 CFR part 2. A general authorization for the release of medical or other information is NOT sufficient for this purpose (see Âfhir:extension ( [ fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-wg> ] ; fhir:value [ a fhir:Code ; fhir:v "fhir" ] ] [ ( fhir:extension [ fhir:url [ fhir:v "packageId"^^xsd:anyURI ; fhir:l fhir:packageId ] ; fhir:value [ a fhir:Id ; fhir:v "hl7.fhir.uv.xver-r5.r4" ] ] [ fhir:url [ fhir:v "version"^^xsd:anyURI ; fhir:l fhir:version ] ; fhir:value [ a fhir:String ; fhir:v "0.1.0" ] ] [ fhir:url [ fhir:v "uri"^^xsd:anyURI ; fhir:l fhir:uri ] ; fhir:value [ a fhir:Uri ; fhir:v "http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4> ] ] ) ; fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/package-source"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/package-source> ] ] [ fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-fmm> ] ; fhir:value [ a fhir:Integer ; fhir:v 0 ; ( fhir:extension [ fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom> ] ; fhir:value [ a fhir:Canonical ; fhir:v "http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4> ] ] ) ] ] [ fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-standards-status> ] ; fhir:value [ a fhir:Code ; fhir:v "trial-use" ; ( fhir:extension [ fhir:url [ fhir:v "http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/StructureDefinition/structuredefinition-conformance-derivedFrom> ] ; fhir:value [ a fhir:Canonical ; fhir:v "http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/uv/xver/ImplementationGuide/hl7.fhir.uv.xver-r5.r4> ] ] ) ] ] ) ; # fhir:url [ fhir:v "http://hl7.org/fhir/uv/xver/ValueSet/R5-v3-PrivacyMark-for-R4"^^xsd:anyURI ; fhir:l <http://hl7.org/fhir/uv/xver/ValueSet/R5-v3-PrivacyMark-for-R4> ] ; # fhir:version [ fhir:v "0.1.0"] ; # fhir:name [ fhir:v "R5V3PrivacyMarkForR4"] ; # fhir:title [ fhir:v "Cross-version ValueSet R5.PrivacyMark for use in FHIR R4"] ; # fhir:status [ fhir:v "active"] ; # fhir:experimental [ fhir:v false] ; # fhir:date [ fhir:v "2026-03-17T21:02:03.8104715+00:00"^^xsd:dateTime] ; # fhir:publisher [ fhir:v "FHIR Infrastructure"] ; # fhir:contact ( [ fhir:name [ fhir:v "FHIR Infrastructure" ] ; ( fhir:telecom [ fhir:system [ fhir:v "url" ] ; fhir:value [ fhir:v "http://www.hl7.org/Special/committees/fiwg" ] ] ) ] ) ; # fhir:description [ fhir:v "This cross-version ValueSet represents content from `http://terminology.hl7.org/ValueSet/v3-PrivacyMark|2.0.0` for use in FHIR R4."] ; # fhir:jurisdiction ( [ ( fhir:coding [ fhir:system [ fhir:v "http://unstats.un.org/unsd/methods/m49/m49.htm"^^xsd:anyURI ; fhir:l <http://unstats.un.org/unsd/methods/m49/m49.htm> ] ; fhir:code [ fhir:v "001" ] ; fhir:display [ fhir:v "World" ] ] ) ] ) ; # fhir:purpose [ fhir:v "This value set is part of the cross-version definitions generated to enable use of the\r\nvalue set `http://terminology.hl7.org/ValueSet/v3-PrivacyMark|2.0.0` as defined in FHIR R5\r\nin FHIR R4.\r\n\r\nThe source value set is bound to the following FHIR R5 elements:\r\n* \r\n\r\nNote that all concepts are included in this cross-version definition because no concepts have compatible representations\r\n\r\nFollowing are the generation technical comments:\r\n\nFHIR ValueSet `http://terminology.hl7.org/ValueSet/v3-PrivacyMark|2.0.0`, defined in FHIR R5 does not have any mapping to FHIR R4"] ; # fhir:compose [ ( fhir:include [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; ( fhir:concept [ fhir:code [ fhir:v "CONTROLLED" ] ; fhir:display [ fhir:v "CONTROLLED" ] ] [ fhir:code [ fhir:v "COPYMark" ] ; fhir:display [ fhir:v "copy of original mark" ] ] [ fhir:code [ fhir:v "CUI" ] ; fhir:display [ fhir:v "CUI" ] ] [ fhir:code [ fhir:v "CUIHLTH" ] ; fhir:display [ fhir:v "CUI//HLTH" ] ] [ fhir:code [ fhir:v "CUIHLTHP" ] ; fhir:display [ fhir:v "(CUI//HLTH)" ] ] [ fhir:code [ fhir:v "CUIP" ] ; fhir:display [ fhir:v "(CUI)" ] ] [ fhir:code [ fhir:v "CUIPRVCY" ] ; fhir:display [ fhir:v "CUI//PRVCY" ] ] [ fhir:code [ fhir:v "CUIPRVCYP" ] ; fhir:display [ fhir:v "(CUI//PRVCY)" ] ] [ fhir:code [ fhir:v "CUISP-HLTH" ] ; fhir:display [ fhir:v "CUI//SP-HLTH" ] ] [ fhir:code [ fhir:v "CUISP-HLTHP" ] ; fhir:display [ fhir:v "(CUI//SP-HLTH)" ] ] [ fhir:code [ fhir:v "CUISP-PRVCY" ] ; fhir:display [ fhir:v "CUI//SP-PRVCY" ] ] [ fhir:code [ fhir:v "CUISP-PRVCYP" ] ; fhir:display [ fhir:v "(CUI//SP-PRVCY)" ] ] [ fhir:code [ fhir:v "ConfidentialMark" ] ; fhir:display [ fhir:v "confidential mark" ] ] [ fhir:code [ fhir:v "ControlledUnclassifiedInformation" ] ; fhir:display [ fhir:v "ControlledUnclassifiedInformation" ] ] [ fhir:code [ fhir:v "DRAFTMark" ] ; fhir:display [ fhir:v "Draft Mark" ] ] [ fhir:code [ fhir:v "DeliverToAddresseeOnlyMark" ] ; fhir:display [ fhir:v "deliver only to addressee mark" ] ] [ fhir:code [ fhir:v "PrivacyMark" ] ; fhir:display [ fhir:v "privacy mark" ] ] [ fhir:code [ fhir:v "RedisclosureProhibitionMark" ] ; fhir:display [ fhir:v "prohibition against redisclosure mark" ] ] [ fhir:code [ fhir:v "RestrictedConfidentialityMark" ] ; fhir:display [ fhir:v "restricted confidentiality mark" ] ] [ fhir:code [ fhir:v "SecurityLabelMark" ] ; fhir:display [ fhir:v "Security Label Mark" ] ] [ fhir:code [ fhir:v "UUI" ] ; fhir:display [ fhir:v "(U)" ] ] ) ] ) ] ; # fhir:expansion [ fhir:timestamp [ fhir:v "2026-03-17T21:02:03.8104715+00:00"^^xsd:dateTime ] ; ( fhir:contains [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CONTROLLED" ] ; fhir:display [ fhir:v "CONTROLLED" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "COPYMark" ] ; fhir:display [ fhir:v "copy of original mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUI" ] ; fhir:display [ fhir:v "CUI" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUIHLTH" ] ; fhir:display [ fhir:v "CUI//HLTH" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUIHLTHP" ] ; fhir:display [ fhir:v "(CUI//HLTH)" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUIP" ] ; fhir:display [ fhir:v "(CUI)" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUIPRVCY" ] ; fhir:display [ fhir:v "CUI//PRVCY" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUIPRVCYP" ] ; fhir:display [ fhir:v "(CUI//PRVCY)" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUISP-HLTH" ] ; fhir:display [ fhir:v "CUI//SP-HLTH" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUISP-HLTHP" ] ; fhir:display [ fhir:v "(CUI//SP-HLTH)" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUISP-PRVCY" ] ; fhir:display [ fhir:v "CUI//SP-PRVCY" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "CUISP-PRVCYP" ] ; fhir:display [ fhir:v "(CUI//SP-PRVCY)" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "ConfidentialMark" ] ; fhir:display [ fhir:v "confidential mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "ControlledUnclassifiedInformation" ] ; fhir:display [ fhir:v "ControlledUnclassifiedInformation" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "DRAFTMark" ] ; fhir:display [ fhir:v "Draft Mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "DeliverToAddresseeOnlyMark" ] ; fhir:display [ fhir:v "deliver only to addressee mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "PrivacyMark" ] ; fhir:display [ fhir:v "privacy mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "RedisclosureProhibitionMark" ] ; fhir:display [ fhir:v "prohibition against redisclosure mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "RestrictedConfidentialityMark" ] ; fhir:display [ fhir:v "restricted confidentiality mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "SecurityLabelMark" ] ; fhir:display [ fhir:v "Security Label Mark" ] ] [ fhir:system [ fhir:v "http://terminology.hl7.org/CodeSystem/v3-ActCode"^^xsd:anyURI ; fhir:l <http://terminology.hl7.org/CodeSystem/v3-ActCode> ] ; fhir:version [ fhir:v "8.0.0" ] ; fhir:code [ fhir:v "UUI" ] ; fhir:display [ fhir:v "(U)" ] ] ) ] . #
IG © 2025+ FHIR Infrastructure. Package hl7.fhir.uv.xver-r5.r4#0.1.0 based on FHIR 4.0.1. Generated 2026-03-20
Links: Table of Contents |
QA Report
| Version History |
|
Propose a change
