Stream: implementers
Topic: Application for Consent
Hannes Ulrich (Nov 15 2017 at 21:12):
Hej, do you know about any application using the Consent resource? I'm currently looking for something which is able to manage the patient consent and can respond if a patient has consented to the further use of its information.
John Moehrke (Nov 15 2017 at 21:46):
There was a connectathon track last connectathon, and will be another this january. see http://wiki.hl7.org/index.php?title=201801_Consumer_Centered_Data_Exchange
John Moehrke (Nov 15 2017 at 21:48):
This coming connectathon the consent rules will likely be managed and authorization decisions be within an OAuth authority. When the consent happens, there will be a Consent Resource published representing that ceremony. In this model the complexity of the rules that were agreed to don't need to be committed into the Consent Resource, but the evidence of the ceremony and the meaning of that ceremony must be represented in the Consent Resource.
John Moehrke (Nov 15 2017 at 21:49):
See blog articles on HL7 blog http://blog.hl7.org/hl7_fhir_connectathon16_patientconsent_oauth2-0 and http://blog.hl7.org/hl7_fhir_connectathon16_patientconsent_oauth2
John Moehrke (Nov 15 2017 at 21:51):
There was an alternate workstream at the last connectathon, that might also happen in January. It is more focused on encapsulating all of the consent ceremony into the Consent Resource, and did not define how that set of rules were used in authorization decisions. In the connectathon the enforcement was done by business rules logic. See my blog article on this model https://healthcaresecprivacy.blogspot.com/2017/09/remedial-fhir-consent-enforcement.html
John Moehrke (Nov 15 2017 at 21:52):
Lastly there is another effort that takes this second model, and uses cascaded OAuth to do the decision. See http://wiki.hl7.org/index.php?title=HIMSS_2017_Patient_Choice
Hannes Ulrich (Nov 15 2017 at 23:55):
Thanks @John Moehrke for the details! I will look into your recommendations!
Last updated: Apr 12 2022 at 19:14 UTC
