Add Record Lifecycle Events to AuditEventObjectLifecycle Set

XMLWordPrintableJSON

    • Type: Change Request
    • Resolution: Persuasive with Modification
    • Priority: Low
    • FHIR Core (FHIR)
    • DSTU1 [deprecated]
    • Security
    • STU
    • AuditEvent
    • Hide

      Gary provided final vocabulary below.

      "Attached is vocabulary for the 27 record lifecycle events, as per ISO TS 21089-2017, Health Informatics - Trusted End-to-End Information Flows, Section 3, Terms and Definitions (2017, at ISO Central Secretariat, passed ballot and ready for publication). This will also be included in the FHIR EHR Record Lifecycle Event Implementation Guide, balloted and (to be) published with FHIR STU-3."

      Record Lifecycle Events - per ISO TS 21089, Trusted End-to-End Information Flows, 2017

      (5) Access/View - Lifecycle Event
      occurs when an agent causes the system to obtain and open a record entry for inspection or review

      (23) Add Legal Hold - Lifecycle Event
      occurs when an agent causes the system to tag or otherwise indicate special access management and suspension of record entry deletion/destruction, if deemed relevant to a lawsuit or which are reasonably anticipated to be relevant or to fulfill organizational policy under the legal doctrine of "duty to preserve"

      (2) Amend (Update) - Lifeycle Event
      occurs when an agent makes any change to record entry content currently residing in storage considered permanent (persistent)

      (14) Archive - Lifeycle Event
      occurs when an agent causes the system to create and move archive artifacts containing record entry content, typically to long-term offline storage

      (4) Attest - Lifecycle Event
      occurs when an agent causes the system to capture the agent's digital signature (or equivalent indication) during formal validation of record entry content

      (27) Decrypt - Lifecycle Event
      occurs when an agent causes the system to decode record entry content from a cipher

      (10) De-Identify (Anononymize) - Lifecycle Event
      occurs when an agent causes the system to scrub record entry content to reduce the association between a set of identifying data and the data subject in a way that may or may not be reversible

      (17) Deprecate - Lifecycle Event
      occurs when an agent causes the system to tag record entry(ies) as obsolete, erroneous or untrustworthy, to warn against its future use

      (16) Destroy/Delete - Lifecycle Event
      occurs when an agent causes the system to permanently erase record entry content from the system

      (7) Disclose - Lifecycle Event
      occurs when an agent causes the system to release, transfer, provision access to, or otherwise divulge record entry content

      (26) Encrypt - Lifecycle Event
      occurs when an agent causes the system to encode record entry content in a cipher

      (13) Extract - Lifecycle Event
      occurs when an agent causes the system to selectively pull out a subset of record entry content, based on explicit criteria

      (21) Link - Lifecycle Event
      occurs when an agent causes the system to connect related record entries

      (19) Merge - Lifecycle Event
      occurs when an agent causes the system to combine or join content from two or more record entries, resulting in a single logical record entry

      (1) Originate/Retain - Record Lifecyle Event
      occurs when an agent causes the system to: a) initiate capture of potential record content, and b) incorporate that content into the storage considered a permanent part of the health record

      (11) Pseudonymize - Lifecycle Event
      occurs when an agent causes the system to remove record entry content to reduce the association between a set of identifying data and the data subject in a way that may be reversible

      (18) Re-activate - Lifecycle Event
      occurs when an agent causes the system to recreate or restore full status to record entries previously deleted or deprecated

      (9) Receive/Retain - Lifecycle Event
      occurs when an agent causes the system to: a) initiate capture of data content from elseware, and b) incorporate that content into the storage considered a permanent part of the health record

      (6) Report (Output) - Lifecycle Event
      occurs when an agent causes the system to produce and deliver record entry content in a particular form and manner

      (12) Re-identify - Lifecycle Event
      occurs when an agent causes the system to restore information to data that allows identification of information source and/or information subject

      (24) Remove Legal Hold - Lifecycle Event
      occurs when an agent causes the system to remove a tag or other cues for special access management had required to fulfill organizational policy under the legal doctrine of "duty to preserve"

      (15) Restore - Lifecycle Event
      occurs when an agent causes the system to recreate record entries and their content from a previous created archive artifact

      (3) Transform/Translate - Lifecycle Event
      occurs when an agent causes the system to change the form, language or code system used to represent record entry content

      (8) Transmit - Lifecycle Event
      occurs when an agent causes the system to send record entry content from one (EHR/PHR/other) system to another

      (22) Unlink - Lifecycle Event
      occurs when an agent causes the system to disconnect two or more record entries previously connected, rendering them separate (disconnected) again

      (20) Unmerge - Lifecycle Event
      occurs when an agent causes the system to reverse a previous record entry merge operation, rendering them separate again

      (25) Verify - Lifecycle Event
      occurs when an agent causes the system to confirm compliance of data or data objects with regulations, requirements, specifications, or other imposed conditions based on organizational policy

      Show
      Gary provided final vocabulary below. "Attached is vocabulary for the 27 record lifecycle events, as per ISO TS 21089-2017, Health Informatics - Trusted End-to-End Information Flows, Section 3, Terms and Definitions (2017, at ISO Central Secretariat, passed ballot and ready for publication). This will also be included in the FHIR EHR Record Lifecycle Event Implementation Guide, balloted and (to be) published with FHIR STU-3." Record Lifecycle Events - per ISO TS 21089, Trusted End-to-End Information Flows, 2017 (5) Access/View - Lifecycle Event occurs when an agent causes the system to obtain and open a record entry for inspection or review (23) Add Legal Hold - Lifecycle Event occurs when an agent causes the system to tag or otherwise indicate special access management and suspension of record entry deletion/destruction, if deemed relevant to a lawsuit or which are reasonably anticipated to be relevant or to fulfill organizational policy under the legal doctrine of "duty to preserve" (2) Amend (Update) - Lifeycle Event occurs when an agent makes any change to record entry content currently residing in storage considered permanent (persistent) (14) Archive - Lifeycle Event occurs when an agent causes the system to create and move archive artifacts containing record entry content, typically to long-term offline storage (4) Attest - Lifecycle Event occurs when an agent causes the system to capture the agent's digital signature (or equivalent indication) during formal validation of record entry content (27) Decrypt - Lifecycle Event occurs when an agent causes the system to decode record entry content from a cipher (10) De-Identify (Anononymize) - Lifecycle Event occurs when an agent causes the system to scrub record entry content to reduce the association between a set of identifying data and the data subject in a way that may or may not be reversible (17) Deprecate - Lifecycle Event occurs when an agent causes the system to tag record entry(ies) as obsolete, erroneous or untrustworthy, to warn against its future use (16) Destroy/Delete - Lifecycle Event occurs when an agent causes the system to permanently erase record entry content from the system (7) Disclose - Lifecycle Event occurs when an agent causes the system to release, transfer, provision access to, or otherwise divulge record entry content (26) Encrypt - Lifecycle Event occurs when an agent causes the system to encode record entry content in a cipher (13) Extract - Lifecycle Event occurs when an agent causes the system to selectively pull out a subset of record entry content, based on explicit criteria (21) Link - Lifecycle Event occurs when an agent causes the system to connect related record entries (19) Merge - Lifecycle Event occurs when an agent causes the system to combine or join content from two or more record entries, resulting in a single logical record entry (1) Originate/Retain - Record Lifecyle Event occurs when an agent causes the system to: a) initiate capture of potential record content, and b) incorporate that content into the storage considered a permanent part of the health record (11) Pseudonymize - Lifecycle Event occurs when an agent causes the system to remove record entry content to reduce the association between a set of identifying data and the data subject in a way that may be reversible (18) Re-activate - Lifecycle Event occurs when an agent causes the system to recreate or restore full status to record entries previously deleted or deprecated (9) Receive/Retain - Lifecycle Event occurs when an agent causes the system to: a) initiate capture of data content from elseware, and b) incorporate that content into the storage considered a permanent part of the health record (6) Report (Output) - Lifecycle Event occurs when an agent causes the system to produce and deliver record entry content in a particular form and manner (12) Re-identify - Lifecycle Event occurs when an agent causes the system to restore information to data that allows identification of information source and/or information subject (24) Remove Legal Hold - Lifecycle Event occurs when an agent causes the system to remove a tag or other cues for special access management had required to fulfill organizational policy under the legal doctrine of "duty to preserve" (15) Restore - Lifecycle Event occurs when an agent causes the system to recreate record entries and their content from a previous created archive artifact (3) Transform/Translate - Lifecycle Event occurs when an agent causes the system to change the form, language or code system used to represent record entry content (8) Transmit - Lifecycle Event occurs when an agent causes the system to send record entry content from one (EHR/PHR/other) system to another (22) Unlink - Lifecycle Event occurs when an agent causes the system to disconnect two or more record entries previously connected, rendering them separate (disconnected) again (20) Unmerge - Lifecycle Event occurs when an agent causes the system to reverse a previous record entry merge operation, rendering them separate again (25) Verify - Lifecycle Event occurs when an agent causes the system to confirm compliance of data or data objects with regulations, requirements, specifications, or other imposed conditions based on organizational policy
    • Kathleen Connor / Glen Marshall: 3-0-0
    • Enhancement
    • Compatible, substantive
    • DSTU1 [deprecated]

      Include full set of Record Lifecycle Events from ISO/HL7 10781, EHR System Functional Model R2 to Value Set for codes in http://hl7.org/fhir/object-lifecycle. AuditEventObjectLifecycle [requirement from Record Lifecycle Event Metadata project] Record lifecycle events include:

      1 Originate/Retain Record Entry

      2 Amend Record Entry

      3 Translate Record Entry

      4 Attest Record Entry

      5 View/Access Record Entry

      6 Output/Report Record Entry

      7 Disclose Record Entry

      8 Transmit Record Entry

      9 Receive/Retain Record Entry

      10 De-Identify Record Entry

      11 Pseudo-nymize Record Entry

      12 Re-Identify Record Entry

      13 Extract Record Entry

      14 Archive Record Entry

      15 Restore Record Entry

      16 Destroy Record Entry

      17 Deprecate/Retract Record Entry

      18 Re-Activate Record Entry

      19 Merge Record Entry

      20 Unmerge Record Entry

      21 Link Record Entry

      22 Unlink Record Entry

      23 Place Legal Hold on Record Entry

      24 Remove Legal Hold on Record Entry

      25 Verify Record Entry Content

      26 Encrypt Record Entry

      27 Decrypt Record Entry

            Assignee:
            Unassigned
            Reporter:
            Gary Dickinson
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: