Privacy Directive Profile¶
| Canonical | ../StructureDefinition/nexus-privacy-directive |
|---|---|
| Status | draft (experimental) · 1.26.0 |
| Base | Consent (constraint) |
| Source | FSH · JSON |
A patient's standing restriction on the collection, use or disclosure of their own personal health information -- the instruction PHIPA calls a lockbox.
Elements / Differential
What this profile constrains beyond Consent. Anything not listed is unchanged from the base; muted type/cardinality values are the base's, shown for context.
| Element | Flags | Card. | Type | Description & Constraints |
|---|---|---|---|---|
| Consent | A patient's standing restriction on their own record (lockbox) i Invariants: privacy-directive-exception-states-a-purpose |
|||
| meta | 0..1 | Meta | ||
| source | S | 0..1 | uri | Identifies EMR instance & pipeline version the resource came from i |
| identifier | S | 0..* | Identifier | Business identifier(s) for the directive i |
| system | 1..1 | uri | i | |
| value | 1..1 | string | i | |
| status | S | 1..1 | code | active (in force) | inactive (superseded or withdrawn) | entered-in-error i Binding: consent-state-codes ( required) |
| scope | S | 1..1 | CodeableConcept | patient-privacy - Privacy consent Fixed: {"coding":[{"system":"http://terminology.hl7.org/CodeSystem/consentscope","code":"patient-privacy","display":"Privacy C…Binding: consent-scope ( required) |
| category | S | 1..* | CodeableConcept | MUST carry the privacy-directive family code; this is how a reader knows what status means iSlicing: pattern:coding.system (open) |
| category:family | S | 1..1 | CodeableConcept | Fixed: this Consent is a privacy directive i Binding: Consent Families Value Set ( required)e.g. app · item · privacy-directive |
| coding | 1..1 | Coding | i | |
| system | 1..1 | uri | i Fixed: ../CodeSystem/nexus-consent-family |
|
| code | 1..1 | code | Fixed: privacy-directive |
|
| patient | S | 1..1 | Reference(Patient Profile) | The patient whose record is restricted i |
| dateTime | S | 1..1 | dateTime | When the instruction was given i |
| performer | S | 0..* | Reference(Patient Profile | RelatedPerson Profile | Practitioner Profile | PractitionerRole Profile) | Who gave the instruction -- the patient, or a substitute decision-maker i |
| organization | S | 0..* | Reference(Organization Profile) | The custodian whose records this directive restricts |
| source[x] | 0..1 | Reference(DocumentReference Profile) | i Slicing: type:$this (open) |
|
| source[x]:sourceReference | S | 0..1 | Reference(DocumentReference Profile) | The signed instruction, where one was captured i |
| policy | S | 1..* | BackboneElement | The policy or statutory provision this directive is made under |
| uri | 1..1 | uri | i | |
| provision | S | 1..1 | BackboneElement | The restriction: type states the decision, and nested provisions carve out exceptions |
| type | S | 1..1 | code | deny for a lockbox | permit for a base consent Binding: consent-provision-type ( required) |
| period | S | 0..1 | Period | When the restriction is effective, if it is time-bounded |
| actor | S | 0..* | BackboneElement | Whom the restriction is against, where it names anyone |
| reference | 1..1 | Reference(Practitioner Profile | PractitionerRole Profile | Organization Profile | App Device Profile | Group) | ||
| action | S | 0..* | CodeableConcept | Which acts are restricted: collect | access | use | disclose i Binding: Privacy Restriction Actions Value Set ( extensible)e.g. collect · access · use … |
| securityLabel | S | 0..* | Coding | Restrict by sensitivity class -- read the high-water-mark warning first i |
| data | S | 0..* | BackboneElement | Which records are restricted, where the directive names records |
| provision | S | 0..* | BackboneElement | Exceptions: what the restriction does NOT reach |
| type | S | 1..1 | code | permit (an exception to a deny directive) | deny |
| purpose | S | 0..* | Coding | Why this exception exists -- BTG marks the break-glass carve-out iBinding: Privacy Exception Purposes Value Set ( extensible)e.g. TREAT · HPAYMT · HOPERAT … |
| provision | 0..0 | Not used -- exceptions do not nest further, matching IHE PCF |