When a Consent covers many organizations or locations within an organization; it is common to have a consent rule that is specific to a location at which the data was created.

Data created in the Adiction Center shall not be shared

This is a need to identify data that is subject to the exception, by where the data was created.

How is this to be encoded?

Is this a use of Consent.except.data where a new meaning (authored from), and the reference being that location? If so, we need a new vocabulary for meaning.

Is this rule dependent on Provenance to identify where? Or are there other deterministic ways? Note that even non-deterministic methods may still be useful to be able to encode this kind of rule in a consent.

Or is this an extension?