Consent-example-smartonfhir.xml

Template for recording a Smart on FHIR Authorization (id = "consent-example-smartonfhir")

<?xml version="1.0" encoding="UTF-8"?>

<Consent xmlns="http://hl7.org/fhir">
  <id value="consent-example-smartonfhir"/> 
  <text> <status value="generated"/> <div xmlns="http://www.w3.org/1999/xhtml"><p> <b> Generated Narrative</b> </p> <p> <b> status</b> : active</p> <p> <b> scope</b> : <span> Privacy Consent</span> </p> <p> <b> category</b> : <span> Patient Consent</span> </p> <p> <b> patient</b> : <a> Generated Summary: Medical record number: 12345 (USUAL); active; Henry Levin ; gender:
           male; birthDate: 1932-09-24</a> </p> <p> <b> dateTime</b> : 23 Jun. 2016, 5:02:33 pm</p> <p> <b> performer</b> : <a> Generated Summary: <span> Emergency Contact</span> ; Peter James Chalmers (OFFICIAL); Phone: (03) 5555 6473; gender: male; period: 2012-03-11
           --&gt; (ongoing)</a> </p> <p> <b> organization</b> : <a> Generated Summary: id: 91654 (OFFICIAL), id: 17-0112278 (USUAL); <span> University Medical Hospital</span> ; name: Burgers University Medical Center; Phone: 022-655 2300</a> </p> <p> <b> policyRule</b> : <span> opt-in</span> </p> <blockquote> <p> <b> provision</b> </p> <p> <b> period</b> : 23 Jun. 2016, 5:02:33 pm --&gt; 23 Jun. 2016, 5:32:33 pm</p> <h3> Provisions</h3> <table> <tr> <td> -</td> </tr> <tr> <td> *</td> </tr> </table> </blockquote> </div> </text> <status value="active"/> 
  <scope> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/consentscope"/> 
      <code value="patient-privacy"/> 
    </coding> 
    </scope> 
      <category> 
    <coding> 
      <system value="http://loinc.org"/> 
      <code value="59284-0"/> 
    </coding> 
  </category> 
  <!--    
   In this SMART on FHIR login, the user consents for data sharing 
   for their elderly parent's record
     -->
  <patient> 
    <reference value="Patient/xcda"/> 
  </patient> 
  <dateTime value="2016-06-23T17:02:33+10:00"/> 
  <performer> 
    <!--    this is the patient record that matches the person
      making the decision. note: it's not always a related person
       -->
    <reference value="RelatedPerson/peter"/> 
  </performer> 
  <organization> 
    <!--    The organization running the Authentication server    -->
    <reference value="Organization/f001"/> 
  </organization> 
  <!--    there's no source record for a Smart on FHIR consent    -->
  <!--    now the consent details itself start    -->
  <!--    smart on fhir is always the base opt-in policy    -->
  <policyRule> 
    <coding> 
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/> 
      <code value="OPTIN"/> 
    </coding> 
  </policyRule> 
  <!--    each scope that relates to FHIR resource access is represented as an exception    -->
  <provision> 
    <period> 
      <start value="2016-06-23T17:02:33+10:00"/> 
      <end value="2016-06-23T17:32:33+10:00"/> 
    </period> 
    <provision> 
      <!--    this rule corresponds to MedicationRequest/read    -->
      <type value="permit"/> 
      <!--    no actors here, or anything, just read/write and the resource type    -->
      <action> 
        <coding> 
          <system value="http://terminology.hl7.org/CodeSystem/consentaction"/> 
          <code value="access"/> 
        </coding> 
      </action> 
      <class> 
        <system value="http://hl7.org/fhir/resource-types"/> 
        <code value="MedicationRequest"/> 
      </class> 
    </provision> 
  </provision> 
</Consent>