• Include these codes as defined in http://terminology.hl7.org/CodeSystem/v3-ActCode version 8.0.0

  Code	Display	Definition
  RefrainPolicy	refrain policy	Conveys prohibited actions which an information custodian, receiver, or user is not permitted to perform unless otherwise authorized or permitted under specified circumstances. *Usage Notes:* ISO 22600-2 species that a Refrain Policy "defines actions the subjects must refrain from performing". Per HL7 Composite Security and Privacy Domain Analysis Model: May be used to indicate that a specific action is prohibited based on specific access control attributes e.g., purpose of use, information type, user role, etc.
  NOAUTH	no disclosure without subject authorization	Prohibition on disclosure without information subject's authorization.
  NOCOLLECT	no collection	Prohibition on collection or storage of the information.
  NODSCLCD	no disclosure without consent directive	Prohibition on disclosure without organizational approved patient restriction.
  NODSCLCDS	no disclosure without information subject's consent directive	Prohibition on disclosure without a consent directive from the information subject.
  NOINTEGRATE	no integration	Prohibition on Integration into other records.
  NOLIST	no unlisted entity disclosure	Prohibition on disclosure except to entities on specific access list.
  NOMOU	no disclosure without MOU	Prohibition on disclosure without an interagency service agreement or memorandum of understanding (MOU).
  NOORGPOL	no disclosure without organizational authorization	Prohibition on disclosure without organizational authorization.
  NOPAT	no disclosure to patient, family or caregivers without attending provider's authorization	Prohibition on disclosing information to patient, family or caregivers without attending provider's authorization. *Usage Note:* The information may be labeled with the ActInformationSensitivity TBOO code, triggering application of this RefrainPolicy code as a handling caveat controlling access. Maps to FHIR NOPAT: Typically, this is used on an Alert resource, when the alert records information on patient abuse or non-compliance. FHIR print name is "keep information from patient". Maps to the French realm - code: INVISIBLE\_PATIENT. * displayName: Document non visible par le patient * codingScheme: 1.2.250.1.213.1.1.4.13 French use case: A label for documents that the author chose to hide from the patient until the content can be disclose to the patient in a face to face meeting between a healthcare professional and the patient (in French law some results like cancer diagnosis or AIDS diagnosis must be announced to the patient by a healthcare professional and should not be find out by the patient alone).
  NOPERSISTP	no collection beyond purpose of use	Prohibition on collection of the information beyond time necessary to accomplish authorized purpose of use is prohibited.
  NORDSCLCD	no redisclosure without consent directive	Prohibition on redisclosure without patient consent directive.
  NORDSLCD	no redisclosure without consent directive	Prohibition on redisclosure without patient consent directive.
  NORDSCLCDS	no redisclosure without information subject's consent directive	Prohibition on redisclosure without a consent directive from the information subject.
  NORDSCLW	no disclosure without jurisdictional authorization	Prohibition on disclosure without authorization under jurisdictional law.
  NORELINK	no relinking	Prohibition on associating de-identified or pseudonymized information with other information in a manner that could or does result in disclosing information intended to be masked.
  NOREUSE	no reuse beyond purpose of use	Prohibition on use of the information beyond the purpose of use initially authorized.
  NOVIP	no unauthorized VIP disclosure	Prohibition on disclosure except to principals with access permission to specific VIP information.
  ORCON	no disclosure without originator authorization	Prohibition on disclosure except as permitted by the information originator.

This value set expansion contains 19 concepts.