This page is part of the HL7 Terminology (v1.0.0: Release) based on FHIR R4. The current version which supercedes this version is 5.2.0. For a full list of available versions, see the Directory of published versions

InformationSensitivityPolicy - XML Representation

(back to description)

Raw xml

Source view

<ValueSet xmlns="http://hl7.org/fhir">
  <id value="v3-InformationSensitivityPolicy"/>
  <language value="en"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><h2>InformationSensitivityPolicy</h2><div><p>Sensitivity codes are not useful for interoperability outside of a policy domain because sensitivity policies are typically localized and vary drastically across policy domains even for the same information category because of differing organizational business rules, security policies, and jurisdictional requirements. For example, an &quot;employee&quot; sensitivity code would make little sense for use outside of a policy domain. &quot;Taboo&quot; would rarely be useful outside of a policy domain unless there are jurisdictional requirements requiring that a provider disclose sensitive information to a patient directly.</p>
<p>Sensitivity codes may be more appropriate in a legacy system's Master Files in order to notify those who access a patient's orders and observations about the sensitivity policies that apply. Newer systems may have a security engine that uses a sensitivity policy's criteria directly. The specializable Sensitivity Act.code may be useful in some scenarious if used in combination with a sensitivity identifier and/or Act.title.</p>
</div><ul><li>Include codes from <a href="CodeSystem-v3-ActCode.html"><code>http://terminology.hl7.org/CodeSystem/v3-ActCode</code></a> where concept  is-a  <a href="CodeSystem-v3-ActCode.html#v3-ActCode-_InformationSensitivityPolicy">_InformationSensitivityPolicy</a></li></ul></div>
  </text>
  <url
       value="http://terminology.hl7.org/ValueSet/v3-InformationSensitivityPolicy"/>
  <identifier>
    <system value="urn:ietf:rfc:3986"/>
    <value value="urn:oid:2.16.840.1.113883.1.11.20428"/>
  </identifier>
  <version value="2.0.0"/>
  <name value="InformationSensitivityPolicy"/>
  <title value="InformationSensitivityPolicy"/>
  <status value="active"/>
  <date value="2014-03-26T00:00:00-04:00"/>
  <description
               value="Sensitivity codes are not useful for interoperability outside of a policy domain because sensitivity policies are typically localized and vary drastically across policy domains even for the same information category because of differing organizational business rules, security policies, and jurisdictional requirements. For example, an &quot;employee&quot; sensitivity code would make little sense for use outside of a policy domain. &quot;Taboo&quot; would rarely be useful outside of a policy domain unless there are jurisdictional requirements requiring that a provider disclose sensitive information to a patient directly.

Sensitivity codes may be more appropriate in a legacy system&#39;s Master Files in order to notify those who access a patient&#39;s orders and observations about the sensitivity policies that apply. Newer systems may have a security engine that uses a sensitivity policy&#39;s criteria directly. The specializable Sensitivity Act.code may be useful in some scenarious if used in combination with a sensitivity identifier and/or Act.title."/>
  <compose>
    <include>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
      <filter>
        <property value="concept"/>
        <op value="is-a"/>
        <value value="_InformationSensitivityPolicy"/>
      </filter>
    </include>
  </compose>
</ValueSet>