Given that the primary focus of the QI-Core specification is interoperability of clinical quality information, we see no benefit to making a strong prescriptive statement about exchange of audit logging information. The intent of the Privacy, Security, and Consent discussion is to ensure that patient information is handled correctly wherever it is exchanged, but the QI-Core profiles do not involve or require exchange of the audit information. We will add a reference to the FHIR Implementer's Safety Checklist as suggested.