| Code | Display | Comments |
|---|
 _ActPolicyType | ActPolicyType | |
| _ActConsent | _ActConsent | |
| _ActDecision | _ActDecision | |
| GRANTORCHOICE | grantor choice | |
| IMPLIED | implied consent | |
| IMPLIEDD | implied consent with opportunity to dissent | |
| NOCONSENT | no consent | |
| OPTIN | opt-in | |
| OPTINR | opt-in with restrictions | |
| OPTOUT | op-out | |
| OPTOUTE | opt-out with exceptions | |
| _ActPrivacyConsentDirective | _ActPrivacyConsentDirective | |
| _ActGDPRConsentDirective | _ActGDPRConsentDirective | |
| GDPRCD | GDPR Consent Directive | |
| GDPRResearchCD | GDPR Research Consent Directive | |
| _ActGenericConsentDirective | _ActGenericConsentDirective | |
| OIC | opt-in to personal information or effect collection in a registry or repository | |
| OIS | opt-in to personal information or effect sharing via a registry or repository | |
| OOC | opt-out of personal information or effect collection in a registry or repository | |
| OOS | opt-out of personal information or effect sharing via a registry or repository | |
| _ActUSPrivacyConsentDirective | _ActUSPrivacyConsentDirective | |
| 42CFRPart2CD | 42 CFR Part 2 consent directive | |
| CompoundResearchCD | Compound HIPAA Research Authorization and Informed Consent for Research | |
| HIPAAAuthCD | HIPAA Authorization Consent Directive | |
| HIPAAConsentCD | HIPAA Consent Directive | |
| HIPAAResearchAuthCD | HIPAA Authorization for Disclosure for Research Consent Directive | |
| HIPAAROAD | HIPAA Right of Access Directive | |
| MDHHS-5515 | Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes | |
| MDHHS-5515MMHC | Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code | |
| MDHHS-5515Part2 | Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2 | |
| USResearchInformedAssent | Informed Assent for Research | |
| USResearchInformedConsent | Informed Consent for Research | |
| USBroadResearchConsent | Broad Consent for Research | |
| _ActInformationActionPolicy | _ActInformationActionPolicy | |
| INFOACCESS | access information | |
| INFOCOLLECT | collect information | |
| INFODEIDENTIFIY | deidentify information | |
| INFODISCLOSE | disclose information | |
| INFOMASK | mask information | |
| INFOREADONLY | read only information | |
| INFOREDACT | redact information | |
| INFOREDISCLOSE | redisclose information | |
| INFOREIDENTIFY | reidentify information | |
| INFOUSE | use information | |
| _ActInformationPolicy | _ActInformationPolicy | |
| JurisIP | jurisdictional information policy | |
| JurisCUI | jurisdictional controlled unclassified information policy | |
| JurisDEID | jurisdictional de-identified information policy | |
| JurisLDS | jurisdictional limited data set | |
| JurisNSI | jurisdictional non-sensitive information policy | |
| JurisPI | jurisdictional public information policy | |
| JurisSP-CUI | jurisdictional specified controlled unclassified information policy | |
| JurisUUI | jurisdictional uncontrolled unclassified information policy | |
| OrgIP | organizational information policy | |
| OrgCUI | organizational basic controlled unclassified information policy | |
| OrgDEID | organizational de-identified informati)on policy | |
| OrgLDS | organizational limited data set information policy | |
| OrgNSI | organizational non-sensitive information policy | |
| OrgPI | organizational public information policy | |
| OrgSP-CUI | organizational specified controlled unclassified information policy | |
| OrgUUI | organizational uncontrolled unclassified information policy | |
| PersIP | personal information policy | |
| PersDEID | personal de-identified information policy | |
| PersLDS | personal limited data set information policy | |
| PersNSI | personal non-sensitive information policy | |
| PersPI | personal public information policy | |
| _ActPrivacyPolicy | ActPrivacyPolicy | |
| _ActConsentDirective | ActConsentDirective | |
| EMRGONLY | emergency only | |
| NOPP | notice of privacy practices | |
| _ActPrivacyLaw | ActPrivacyLaw | |
| _ActGDPRPrivacyLaw | General Data Protection Regulation | |
| GDPRCONSENT | GDPR Consent | |
| _ActUSPrivacyLaw | _ActUSPrivacyLaw | |
| 42CFRPart2 | 42 CFR Part2 | |
| CommonRule | Common Rule | |
| HIPAAAuth | HIPAA Authorization for Disclosure | |
| HIPAAConsent | HIPAA Consent | |
| HIPAANOPP | HIPAA notice of privacy practices | |
| HIPAAPsyNotes | HIPAA psychotherapy notes | |
| HIPAAROA | HIPAA Right of Access | |
| HIPAASelfPay | HIPAA self-pay | |
| Title38Section7332 | Title 38 Section 7332 | |
| a) HIPAAConsent | HIPAA Consent | |
| _InformationSensitivityPolicy | InformationSensitivityPolicy | |
| _ActInformationSensitivityPolicy | ActInformationSensitivityPolicy | |
| ETH | substance abuse information sensitivity | |
| GDIS | genetic disease information sensitivity | |
| HIV | HIV/AIDS information sensitivity | |
| MST | military sexual trauma information sensitivity | |
| PREGNANT | pregnancy information sensitivity | |
| SCA | sickle cell anemia information sensitivity | |
| SDV | sexual assault, abuse, or domestic violence information sensitivity | |
| SEX | sexuality and reproductive health information sensitivity | |
| SPI | specially protected information sensitivity | |
| BH | behavioral health information sensitivity | |
| COGN | cognitive disability information sensitivity | |
| DVD | developmental disability information sensitivity | |
| EMOTDIS | emotional disturbance information sensitivity | |
| MH | mental health information sensitivity | |
| PSY | psychiatry disorder information sensitivity | |
| PSYTHPN | psychotherapy note information sensitivity | |
| SUD | substance use disorder information sensitivity | |
| ETHUD | alcohol use disorder information sensitivity | |
| OPIOIDUD | opioid use disorder information sensitivity | |
| STD | sexually transmitted disease information sensitivity | |
| TBOO | taboo | |
| VIO | violence information sensitivity | |
| IDS | Identifier Sensitivity | |
| SICKLE | sickle cell | |
| _EntitySensitivityPolicyType | EntityInformationSensitivityPolicy | |
| DEMO | all demographic information sensitivity | |
| DOB | date of birth information sensitivity | |
| GENDER | gender and sexual orientation information sensitivity | |
| LIVARG | living arrangement information sensitivity | |
| MARST | marital status information sensitivity | |
| PATLOC | patient location | |
| RACE | race information sensitivity | |
| REL | religion information sensitivity | |
| _RoleInformationSensitivityPolicy | RoleInformationSensitivityPolicy | |
| B | business information sensitivity | |
| EMPL | employer information sensitivity | |
| LOCIS | location information sensitivity | |
| SSP | sensitive service provider information sensitivity | |
| ADOL | adolescent information sensitivity | |
| CEL | celebrity information sensitivity | |
| VIP | celebrity information sensitivity | |
| DIA | diagnosis information sensitivity | |
| DRGIS | drug information sensitivity | |
| EMP | employee information sensitivity | |
| PDS | patient default information sensitivity | |
| PHY | physician requested information sensitivity | |
| PRS | patient requested information sensitivity | |
| COMPT | compartment | |
| ACOCOMPT | accountable care organization compartment | |
| CDSSCOMPT | CDS system compartment | |
| CTCOMPT | care team compartment | |
| FMCOMPT | financial management compartment | |
| HRCOMPT | human resource compartment | |
| LRCOMPT | legitimate relationship compartment | |
| PACOMPT | patient administration compartment | |
| RESCOMPT | research project compartment | |
| RMGTCOMPT | records management compartment | |
| ActTrustPolicyType | trust policy | |
| TRSTACCRD | trust accreditation | |
| TRSTAGRE | trust agreement | |
| TRSTASSUR | trust assurance | |
| TRSTCERT | trust certificate | |
| TRSTFWK | trust framework | |
| TRSTMEC | trust mechanism | |
| COVPOL | benefit policy | |
| SecurityPolicy | security policy | |
| AUTHPOL | authorization policy | |
| ACCESSCONSCHEME | access control scheme | |
| DELEPOL | delegation policy | |
| ObligationPolicy | obligation policy | |
| ANONY | anonymize | |
| AOD | accounting of disclosure | |
| AUDIT | audit | |
| AUDTR | audit trail | |
| CPLYPOL | comply with policy | |
| CPLYCC | comply with confidentiality code | |
| CPLYCD | comply with consent directive | |
| CPLYCUI | comply with controlled unclassified information policy | |
| CPLYJPP | comply with jurisdictional privacy policy | |
| CPLYJSP | comply with jurisdictional security policy | |
| CPLYOPP | comply with organizational privacy policy | |
| CPLYOSP | comply with organizational security policy | |
| DECLASSIFYLABEL | declassify security label | |
| DEID | deidentify | |
| DELAU | delete after use | |
| DOWNGRDLABEL | downgrade security label | |
| DRIVLABEL | derive security label | |
| ENCRYPT | encrypt | |
| ENCRYPTR | encrypt at rest | |
| ENCRYPTT | encrypt in transit | |
| ENCRYPTU | encrypt in use | |
| HUAPRV | human approval | |
| LABEL | assign security label | |
| MASK | mask | |
| MINEC | minimum necessary | |
| PERSISTLABEL | persist security label | |
| PRIVMARK | privacy mark | |
| CUIMark | CUI Mark | |
| PSEUD | pseudonymize | |
| REDACT | redact | |
| UPGRDLABEL | upgrade security label | |
| PrivacyMark | privacy mark | |
| ControlledUnclassifiedInformation | ControlledUnclassifiedInformation | |
| CONTROLLED | CONTROLLED | |
| CUI | CUI | |
| CUIHLTH | CUI//HLTH | |
| CUIHLTHP | (CUI//HLTH) | |
| CUIP | (CUI) | |
| CUIPRVCY | CUI//PRVCY | |
| CUIPRVCYP | (CUI//PRVCY) | |
| CUISP-HLTH | CUI//SP-HLTH | |
| CUISP-HLTHP | (CUI//SP-HLTH) | |
| CUISP-PRVCY | CUI//SP-PRVCY | |
| CUISP-PRVCYP | (CUI//SP-PRVCY) | |
| UUI | (U) | |
| SecurityLabelMark | Security Label Mark | |
| ConfidentialMark | confidential mark | |
| COPYMark | copy of original mark | |
| DeliverToAddresseeOnlyMark | deliver only to addressee mark | |
| RedisclosureProhibitionMark | prohibition against redisclosure mark | |
| RestrictedConfidentialityMark | restricted confidentiality mark | |
| DRAFTMark | Draft Mark | |
| RefrainPolicy | refrain policy | |
| NOAUTH | no disclosure without subject authorization | |
| NOCOLLECT | no collection | |
| NODSCLCD | no disclosure without consent directive | |
| NODSCLCDS | no disclosure without information subject's consent directive | |
| NOINTEGRATE | no integration | |
| NOLIST | no unlisted entity disclosure | |
| NOMOU | no disclosure without MOU | |
| NOORGPOL | no disclosure without organizational authorization | |
| NOPAT | no disclosure to patient, family or caregivers without attending provider's authorization | |
| NOPERSISTP | no collection beyond purpose of use | |
| NORDSCLCD | no redisclosure without consent directive | |
| NORDSLCD | no redisclosure without consent directive | |
| NORDSCLCDS | no redisclosure without information subject's consent directive | |
| NORDSCLW | no disclosure without jurisdictional authorization | |
| NORELINK | no relinking | |
| NOREUSE | no reuse beyond purpose of use | |
| NOVIP | no unauthorized VIP disclosure | |
| ORCON | no disclosure without originator authorization | |