Stream: implementers
Topic: Define URI for Policy in consent
Lakshmi Thrivarna (Sep 05 2018 at 09:53):
Hi All, Can any one suggest me , How to define our own Policy(URI) in Consent.
John Moehrke (Sep 05 2018 at 14:09):
It is just a URI. The thinking we had is that an organization (hospital) would have their overall privacy policy somewhere posted on their web site. The persistant URL on that web site could be one possibility as the URI. alternatively that organization might have a document management system, where they manage their formal documents, and a URI into that might be a good URI. alternatively they might encode their policy into XACML, and thus the XACML policy set ID might be a good URI... So, it is up to the organzation to identify what their URI is, and how they manage it. The world is wide open.
Lakshmi Thrivarna (Sep 05 2018 at 14:14):
@John Moehrke Thank you for your information
John Moehrke (Sep 05 2018 at 14:17):
Were you asking about .policyRule, or were you asking about policy.uri? They are different purpose.
John Moehrke (Sep 05 2018 at 14:17):
My response was specific to .policyRule
John Moehrke (Sep 05 2018 at 14:20):
the .policy element, if you chose to use it, would hold the motivating regulations that caused your policy to exist. I don't think this will be common to be populated in thousands of patient specific Consent resources. I would expect that your consent policy (.policyRule) would explain ONCE in that legal text the motivating regulations for the policy. However there was interest in having the .policy element for a very focused kind of consent.
John Moehrke (Sep 05 2018 at 14:25):
for example in the USA there is a specific regulation that covers mental-health data captured under specific treatment clinics that are federally funded. A very specific case. This regulation (42-CFR Part 2), requires a specific Consent that is independent of other Consents. So by populating the .policy element on one can see that fact. (This can also be known by having multiple .policyRule URI)
Last updated: Apr 12 2022 at 19:14 UTC
