There must be a section on privacy and security concerns particular to the use-cases and transactions covered by this IG and perhaps reference out to other resources in FHIR that point out the technologies to address those concerns. For example, some of the immediate requirements are the mutualy autentication between the healthcare provider and public health authority, or any potential confidentiality from the intermediaries which could call for the use of multiple envelopes and encryption of the payload.

(Comment 96 - imported by: Jean Duteau)