Id2.16.840.1.113883.1.11.20471Effective Date2018‑04‑01
Statusfinal FinalVersion LabelDEFN=UV=VO=1418-20180401
NameSecurityControlObservationValueDisplay NameSecurityControlObservationValue
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Security observation values used to indicate security control metadata. V:SecurityControl is the union of V:SecurityPolicy,V:ObligationPolicy, V:RefrainPolicy, V:PurposeOfUse, and V:GeneralPurpose of Use used to populate the SecurityControlObservationValue attribute in order to convey one or more nonhierarchical security control metadata dictating handling caveats, purpose of use, dissemination controls and other refrain policies, and obligations to which a custodian or receiver is required to comply.

2 Source Code Systems
2.16.840.1.113883.5.8 - Act Reason - FHIR: http://terminology.hl7.org/CodeSystem/v3-ActReason
2.16.840.1.113883.5.4 - Act Code - FHIR: http://terminology.hl7.org/CodeSystem/v3-ActCode - HL7 V2: ACTCODE
Level/ TypeCodeDisplay Name / Intensional DefinitionCode System
 
circleplus Include
Value Set 2.16.840.1.113883.1.11.20444 Flexibility 2014-03-26T00:00:00
0‑S
SecurityPolicy
security policy
Act Code
1‑S
ObligationPolicy
obligation policy
Act Code
2‑L
ANONY
anonymize
Act Code
2‑L
AOD
accounting of disclosure
Act Code
2‑L
AUDIT
audit
Act Code
2‑L
AUDTR
audit trail
Act Code
2‑L
CPLYCC
comply with confidentiality code
Act Code
2‑L
CPLYCD
comply with consent directive
Act Code
2‑L
CPLYJPP
comply with jurisdictional privacy policy
Act Code
2‑L
CPLYOPP
comply with organizational privacy policy
Act Code
2‑L
CPLYOSP
comply with organizational security policy
Act Code
2‑L
CPLYPOL
comply with policy
Act Code
2‑L
DECLASSIFYLABEL
declassify security label
Act Code
2‑L
DEID
deidentify
Act Code
2‑L
DELAU
delete after use
Act Code
2‑L
DOWNGRDLABEL
downgrade security label
Act Code
2‑L
DRIVLABEL
derive security label
Act Code
2‑S
ENCRYPT
encrypt
Act Code
3‑L
ENCRYPTR
encrypt at rest
Act Code
3‑L
ENCRYPTT
encrypt in transit
Act Code
3‑L
ENCRYPTU
encrypt in use
Act Code
2‑L
HUAPRV
human approval
Act Code
2‑L
LABEL
assign security label
Act Code
2‑L
MASK
mask
Act Code
2‑L
MINEC
minimum necessary
Act Code
2‑L
PERSISTLABEL
persist security label
Act Code
2‑L
PRIVMARK
privacy mark
Act Code
2‑L
PSEUD
pseudonymize
Act Code
2‑L
REDACT
redact
Act Code
2‑L
UPGRDLABEL
upgrade security label
Act Code
1‑S
RefrainPolicy
refrain policy
Act Code
2‑L
NOAUTH
no disclosure without subject authorization
Act Code
2‑L
NOCOLLECT
no collection
Act Code
2‑L
NODSCLCD
no disclosure without consent directive
Act Code
2‑L
NODSCLCDS
no disclosure without information subject's consent directive
Act Code
2‑L
NOINTEGRATE
no integration
Act Code
2‑L
NOLIST
no unlisted entity disclosure
Act Code
2‑L
NOMOU
no disclosure without MOU
Act Code
2‑L
NOORGPOL
no disclosure without organizational authorization
Act Code
2‑L
NOPAT
no disclosure to patient, family or caregivers without attending provider's authorization
Act Code
2‑L
NOPERSISTP
no collection beyond purpose of use
Act Code
2‑L
NORDSCLCD
no redisclosure without consent directive
Act Code
2‑L
NORDSCLCDS
no redisclosure without information subject's consent directive
Act Code
2‑L
NORDSCLW
no disclosure without jurisdictional authorization
Act Code
2‑L
NORELINK
no relinking
Act Code
2‑L
NOREUSE
no reuse beyond purpose of use
Act Code
2‑L
NOVIP
no unauthorized VIP disclosure
Act Code
2‑L
ORCON
no disclosure without originator authorization
Act Code
 
circleplus Include
Value Set 2.16.840.1.113883.1.11.20445 Flexibility 2014-03-26T00:00:00
0‑S
ObligationPolicy
obligation policy
Act Code
1‑L
ANONY
anonymize
Act Code
1‑L
AOD
accounting of disclosure
Act Code
1‑L
AUDIT
audit
Act Code
1‑L
AUDTR
audit trail
Act Code
1‑L
CPLYCC
comply with confidentiality code
Act Code
1‑L
CPLYCD
comply with consent directive
Act Code
1‑L
CPLYJPP
comply with jurisdictional privacy policy
Act Code
1‑L
CPLYOPP
comply with organizational privacy policy
Act Code
1‑L
CPLYOSP
comply with organizational security policy
Act Code
1‑L
CPLYPOL
comply with policy
Act Code
1‑L
DECLASSIFYLABEL
declassify security label
Act Code
1‑L
DEID
deidentify
Act Code
1‑L
DELAU
delete after use
Act Code
1‑L
DOWNGRDLABEL
downgrade security label
Act Code
1‑L
DRIVLABEL
derive security label
Act Code
1‑S
ENCRYPT
encrypt
Act Code
2‑L
ENCRYPTR
encrypt at rest
Act Code
2‑L
ENCRYPTT
encrypt in transit
Act Code
2‑L
ENCRYPTU
encrypt in use
Act Code
1‑L
HUAPRV
human approval
Act Code
1‑L
LABEL
assign security label
Act Code
1‑L
MASK
mask
Act Code
1‑L
MINEC
minimum necessary
Act Code
1‑L
PERSISTLABEL
persist security label
Act Code
1‑L
PRIVMARK
privacy mark
Act Code
1‑L
PSEUD
pseudonymize
Act Code
1‑L
REDACT
redact
Act Code
1‑L
UPGRDLABEL
upgrade security label
Act Code
 
circleplus Include
Value Set 2.16.840.1.113883.1.11.20446 Flexibility 2014-03-26T00:00:00
0‑S
RefrainPolicy
refrain policy
Act Code
1‑L
NOAUTH
no disclosure without subject authorization
Act Code
1‑L
NOCOLLECT
no collection
Act Code
1‑L
NODSCLCD
no disclosure without consent directive
Act Code
1‑L
NODSCLCDS
no disclosure without information subject's consent directive
Act Code
1‑L
NOINTEGRATE
no integration
Act Code
1‑L
NOLIST
no unlisted entity disclosure
Act Code
1‑L
NOMOU
no disclosure without MOU
Act Code
1‑L
NOORGPOL
no disclosure without organizational authorization
Act Code
1‑L
NOPAT
no disclosure to patient, family or caregivers without attending provider's authorization
Act Code
1‑L
NOPERSISTP
no collection beyond purpose of use
Act Code
1‑L
NORDSCLCD
no redisclosure without consent directive
Act Code
1‑L
NORDSCLCDS
no redisclosure without information subject's consent directive
Act Code
1‑L
NORDSCLW
no disclosure without jurisdictional authorization
Act Code
1‑L
NORELINK
no relinking
Act Code
1‑L
NOREUSE
no reuse beyond purpose of use
Act Code
1‑L
NOVIP
no unauthorized VIP disclosure
Act Code
1‑L
ORCON
no disclosure without originator authorization
Act Code
 
circleplus Include
Value Set 2.16.840.1.113883.1.11.20448 Flexibility 2014-03-26T00:00:00
0‑S
PurposeOfUse
purpose of use
Act Reason
1‑L
HMARKT
healthcare marketing
Act Reason
1‑S
HOPERAT
healthcare operations
Act Reason
2‑L
DONAT
donation
Act Reason
2‑L
FRAUD
fraud
Act Reason
2‑L
GOV
government
Act Reason
2‑L
HACCRED
health accreditation
Act Reason
2‑L
HCOMPL
health compliance
Act Reason
2‑L
HDECD
decedent
Act Reason
2‑L
HDIRECT
directory
Act Reason
2‑L
HLEGAL
legal
Act Reason
2‑L
HOUTCOMS
health outcome measure
Act Reason
2‑L
HPRGRP
health program reporting
Act Reason
2‑L
HQUALIMP
health quality improvement
Act Reason
2‑L
HSYSADMIN
health system administration
Act Reason
2‑L
MEMADMIN
member administration
Act Reason
2‑L
PATADMIN
patient administration
Act Reason
2‑L
PATSFTY
patient safety
Act Reason
2‑L
PERFMSR
performance measure
Act Reason
2‑L
RECORDMGT
records management
Act Reason
2‑L
TRAIN
training
Act Reason
1‑S
HPAYMT
healthcare payment
Act Reason
2‑L
CLMATTCH
claim attachment
Act Reason
2‑L
COVAUTH
coverage authorization
Act Reason
2‑S
COVERAGE
coverage under policy or program
Act Reason
3‑L
ELIGDTRM
eligibility determination
Act Reason
3‑L
ELIGVER
eligibility verification
Act Reason
3‑L
ENROLLM
enrollment
Act Reason
2‑L
REMITADV
remittance advice
Act Reason
1‑S
HRESCH
healthcare research
Act Reason
2‑L
CLINTRCH
clinical trial research
Act Reason
1‑S
PATRQT
patient requested
Act Reason
2‑L
FAMRQT
family requested
Act Reason
2‑L
PWATRNY
power of attorney
Act Reason
2‑L
SUPNWK
support network
Act Reason
1‑S
PUBHLTH
public health
Act Reason
2‑L
DISASTER
disaster
Act Reason
2‑L
THREAT
threat
Act Reason
1‑S
TREAT
treatment
Act Reason
2‑L
CAREMGT
Care Management
Act Reason
2‑L
CLINTRL
clinical trial
Act Reason
2‑L
ETREAT
Emergency Treatment
Act Reason
2‑L
POPHLTH
population health
Act Reason
 
circleplus Include
Value Set 2.16.840.1.113883.1.11.20449 Flexibility 2014-03-26T00:00:00
0‑S
COVERAGE
coverage under policy or program
Act Reason
0‑L
ETREAT
Emergency Treatment
Act Reason
0‑L
HMARKT
healthcare marketing
Act Reason
0‑S
HOPERAT
healthcare operations
Act Reason
0‑S
HPAYMT
healthcare payment
Act Reason
0‑S
HRESCH
healthcare research
Act Reason
0‑S
PATRQT
patient requested
Act Reason
0‑S
PUBHLTH
public health
Act Reason
0‑S
TREAT
treatment
Act Reason

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS 
Id2.16.840.1.113883.1.11.20444Effective Date2014‑03‑26
Statusfinal FinalVersion LabelDEFN=UV=VO=1360-20160323
NameSecurityPolicyDisplay NameSecurityPolicy
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Types of security policies that further specify the ActClassPolicy value set.

Examples:

  • encrypt
  • prohibit redisclosure without consent directive
Source Code System
2.16.840.1.113883.5.4
Level/ TypeCodeDisplay NameCode System
0‑S
SecurityPolicy
security policy
Act Code
1‑S
ObligationPolicy
obligation policy
Act Code
2‑L
ANONY
anonymize
Act Code
2‑L
AOD
accounting of disclosure
Act Code
2‑L
AUDIT
audit
Act Code
2‑L
AUDTR
audit trail
Act Code
2‑L
CPLYCC
comply with confidentiality code
Act Code
2‑L
CPLYCD
comply with consent directive
Act Code
2‑L
CPLYJPP
comply with jurisdictional privacy policy
Act Code
2‑L
CPLYOPP
comply with organizational privacy policy
Act Code
2‑L
CPLYOSP
comply with organizational security policy
Act Code
2‑L
CPLYPOL
comply with policy
Act Code
2‑L
DECLASSIFYLABEL
declassify security label
Act Code
2‑L
DEID
deidentify
Act Code
2‑L
DELAU
delete after use
Act Code
2‑L
DOWNGRDLABEL
downgrade security label
Act Code
2‑L
DRIVLABEL
derive security label
Act Code
2‑S
ENCRYPT
encrypt
Act Code
3‑L
ENCRYPTR
encrypt at rest
Act Code
3‑L
ENCRYPTT
encrypt in transit
Act Code
3‑L
ENCRYPTU
encrypt in use
Act Code
2‑L
HUAPRV
human approval
Act Code
2‑L
LABEL
assign security label
Act Code
2‑L
MASK
mask
Act Code
2‑L
MINEC
minimum necessary
Act Code
2‑L
PERSISTLABEL
persist security label
Act Code
2‑L
PRIVMARK
privacy mark
Act Code
2‑L
PSEUD
pseudonymize
Act Code
2‑L
REDACT
redact
Act Code
2‑L
UPGRDLABEL
upgrade security label
Act Code
1‑S
RefrainPolicy
refrain policy
Act Code
2‑L
NOAUTH
no disclosure without subject authorization
Act Code
2‑L
NOCOLLECT
no collection
Act Code
2‑L
NODSCLCD
no disclosure without consent directive
Act Code
2‑L
NODSCLCDS
no disclosure without information subject's consent directive
Act Code
2‑L
NOINTEGRATE
no integration
Act Code
2‑L
NOLIST
no unlisted entity disclosure
Act Code
2‑L
NOMOU
no disclosure without MOU
Act Code
2‑L
NOORGPOL
no disclosure without organizational authorization
Act Code
2‑L
NOPAT
no disclosure to patient, family or caregivers without attending provider's authorization
Act Code
2‑L
NOPERSISTP
no collection beyond purpose of use
Act Code
2‑L
NORDSCLCD
no redisclosure without consent directive
Act Code
2‑L
NORDSCLCDS
no redisclosure without information subject's consent directive
Act Code
2‑L
NORDSCLW
no disclosure without jurisdictional authorization
Act Code
2‑L
NORELINK
no relinking
Act Code
2‑L
NOREUSE
no reuse beyond purpose of use
Act Code
2‑L
NOVIP
no unauthorized VIP disclosure
Act Code
2‑L
ORCON
no disclosure without originator authorization
Act Code

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS 
Id2.16.840.1.113883.1.11.20445Effective Date2014‑03‑26
Statusfinal FinalVersion LabelDEFN=UV=VO=1360-20160323
NameObligationPolicyDisplay NameObligationPolicy
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Conveys the mandated workflow action that an information custodian, receiver, or user must perform.

Examples:

  • encrypt

Usage Note: Per OASIS XACML, an obligation is an operation specified in a policy or policy that is performed in conjunction with the enforcement of an access control decision.

Source Code System
2.16.840.1.113883.5.4
Level/ TypeCodeDisplay NameCode System
0‑S
ObligationPolicy
obligation policy
Act Code
1‑L
ANONY
anonymize
Act Code
1‑L
AOD
accounting of disclosure
Act Code
1‑L
AUDIT
audit
Act Code
1‑L
AUDTR
audit trail
Act Code
1‑L
CPLYCC
comply with confidentiality code
Act Code
1‑L
CPLYCD
comply with consent directive
Act Code
1‑L
CPLYJPP
comply with jurisdictional privacy policy
Act Code
1‑L
CPLYOPP
comply with organizational privacy policy
Act Code
1‑L
CPLYOSP
comply with organizational security policy
Act Code
1‑L
CPLYPOL
comply with policy
Act Code
1‑L
DECLASSIFYLABEL
declassify security label
Act Code
1‑L
DEID
deidentify
Act Code
1‑L
DELAU
delete after use
Act Code
1‑L
DOWNGRDLABEL
downgrade security label
Act Code
1‑L
DRIVLABEL
derive security label
Act Code
1‑S
ENCRYPT
encrypt
Act Code
2‑L
ENCRYPTR
encrypt at rest
Act Code
2‑L
ENCRYPTT
encrypt in transit
Act Code
2‑L
ENCRYPTU
encrypt in use
Act Code
1‑L
HUAPRV
human approval
Act Code
1‑L
LABEL
assign security label
Act Code
1‑L
MASK
mask
Act Code
1‑L
MINEC
minimum necessary
Act Code
1‑L
PERSISTLABEL
persist security label
Act Code
1‑L
PRIVMARK
privacy mark
Act Code
1‑L
PSEUD
pseudonymize
Act Code
1‑L
REDACT
redact
Act Code
1‑L
UPGRDLABEL
upgrade security label
Act Code

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS 
Id2.16.840.1.113883.1.11.20446Effective Date2014‑03‑26
Statusfinal FinalVersion LabelDEFN=UV=VO=1360-20160323
NameRefrainPolicyDisplay NameRefrainPolicy
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Conveys prohibited actions which an information custodian, receiver, or user is not permitted to perform unless otherwise authorized or permitted under specified circumstances.

Examples:

  • prohibit redisclosure without consent directive
Source Code System
2.16.840.1.113883.5.4
Level/ TypeCodeDisplay NameCode System
0‑S
RefrainPolicy
refrain policy
Act Code
1‑L
NOAUTH
no disclosure without subject authorization
Act Code
1‑L
NOCOLLECT
no collection
Act Code
1‑L
NODSCLCD
no disclosure without consent directive
Act Code
1‑L
NODSCLCDS
no disclosure without information subject's consent directive
Act Code
1‑L
NOINTEGRATE
no integration
Act Code
1‑L
NOLIST
no unlisted entity disclosure
Act Code
1‑L
NOMOU
no disclosure without MOU
Act Code
1‑L
NOORGPOL
no disclosure without organizational authorization
Act Code
1‑L
NOPAT
no disclosure to patient, family or caregivers without attending provider's authorization
Act Code
1‑L
NOPERSISTP
no collection beyond purpose of use
Act Code
1‑L
NORDSCLCD
no redisclosure without consent directive
Act Code
1‑L
NORDSCLCDS
no redisclosure without information subject's consent directive
Act Code
1‑L
NORDSCLW
no disclosure without jurisdictional authorization
Act Code
1‑L
NORELINK
no relinking
Act Code
1‑L
NOREUSE
no reuse beyond purpose of use
Act Code
1‑L
NOVIP
no unauthorized VIP disclosure
Act Code
1‑L
ORCON
no disclosure without originator authorization
Act Code

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS 
Id2.16.840.1.113883.1.11.20448Effective Date2014‑03‑26
Statusfinal FinalVersion LabelDEFN=UV=VO=1360-20160323
NamePurposeOfUseDisplay NamePurposeOfUse
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Supports communication of purpose of use at a general level.

Source Code System
2.16.840.1.113883.5.8
Level/ TypeCodeDisplay NameCode System
0‑S
PurposeOfUse
purpose of use
Act Reason
1‑L
HMARKT
healthcare marketing
Act Reason
1‑S
HOPERAT
healthcare operations
Act Reason
2‑L
DONAT
donation
Act Reason
2‑L
FRAUD
fraud
Act Reason
2‑L
GOV
government
Act Reason
2‑L
HACCRED
health accreditation
Act Reason
2‑L
HCOMPL
health compliance
Act Reason
2‑L
HDECD
decedent
Act Reason
2‑L
HDIRECT
directory
Act Reason
2‑L
HLEGAL
legal
Act Reason
2‑L
HOUTCOMS
health outcome measure
Act Reason
2‑L
HPRGRP
health program reporting
Act Reason
2‑L
HQUALIMP
health quality improvement
Act Reason
2‑L
HSYSADMIN
health system administration
Act Reason
2‑L
MEMADMIN
member administration
Act Reason
2‑L
PATADMIN
patient administration
Act Reason
2‑L
PATSFTY
patient safety
Act Reason
2‑L
PERFMSR
performance measure
Act Reason
2‑L
RECORDMGT
records management
Act Reason
2‑L
TRAIN
training
Act Reason
1‑S
HPAYMT
healthcare payment
Act Reason
2‑L
CLMATTCH
claim attachment
Act Reason
2‑L
COVAUTH
coverage authorization
Act Reason
2‑S
COVERAGE
coverage under policy or program
Act Reason
3‑L
ELIGDTRM
eligibility determination
Act Reason
3‑L
ELIGVER
eligibility verification
Act Reason
3‑L
ENROLLM
enrollment
Act Reason
2‑L
REMITADV
remittance advice
Act Reason
1‑S
HRESCH
healthcare research
Act Reason
2‑L
CLINTRCH
clinical trial research
Act Reason
1‑S
PATRQT
patient requested
Act Reason
2‑L
FAMRQT
family requested
Act Reason
2‑L
PWATRNY
power of attorney
Act Reason
2‑L
SUPNWK
support network
Act Reason
1‑S
PUBHLTH
public health
Act Reason
2‑L
DISASTER
disaster
Act Reason
2‑L
THREAT
threat
Act Reason
1‑S
TREAT
treatment
Act Reason
2‑L
CAREMGT
Care Management
Act Reason
2‑L
CLINTRL
clinical trial
Act Reason
2‑L
ETREAT
Emergency Treatment
Act Reason
2‑L
POPHLTH
population health
Act Reason

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS 
Id2.16.840.1.113883.1.11.20449Effective Date2014‑03‑26
Statusfinal FinalVersion LabelDEFN=UV=VO=1360-20160323
NameGeneralPurposeOfUseDisplay NameGeneralPurposeOfUse
Description

History description 2014-03-26: Lock all vaue sets untouched since 2014-03-26 to trackingId 2014T1_2014_03_26

description:

Supports communication of purpose of use at a general level.

Source Code System
2.16.840.1.113883.5.8
Level/ TypeCodeDisplay NameCode System
0‑S
COVERAGE
coverage under policy or program
Act Reason
0‑L
ETREAT
Emergency Treatment
Act Reason
0‑L
HMARKT
healthcare marketing
Act Reason
0‑S
HOPERAT
healthcare operations
Act Reason
0‑S
HPAYMT
healthcare payment
Act Reason
0‑S
HRESCH
healthcare research
Act Reason
0‑S
PATRQT
patient requested
Act Reason
0‑S
PUBHLTH
public health
Act Reason
0‑S
TREAT
treatment
Act Reason

Legenda: Type L=leaf, S=specializable, A=abstract, D=deprecated. NullFlavor OTH (other) suggests text in originalText. HL7 V3: NullFlavors to appear in @nullFlavor attribute instead of @code.
downloadXML JSON CSV SQL SVS