{
  "description": "Security label metadata that 'segments' an IT resource by conveying a mandate, obligation, requirement, rule, or expectation relating to its privacy.",
  "compose": {
    "include": [ {
      "filter": [ {
        "op": "is-a",
        "value": "_ActConsentType",
        "property": "concept"
      } ],
      "system": "http://terminology.hl7.org/CodeSystem/v3-ActCode"
    }, {
      "filter": [ {
        "op": "is-a",
        "value": "_ActConsentDirective",
        "property": "concept"
      } ],
      "system": "http://terminology.hl7.org/CodeSystem/v3-ActCode"
    }, {
      "filter": [ {
        "op": "is-a",
        "value": "_ActPrivacyLaw",
        "property": "concept"
      } ],
      "system": "http://terminology.hl7.org/CodeSystem/v3-ActCode"
    }, {
      "system": "http://terminology.hl7.org/CodeSystem/v3-ActCode",
      "concept": [ {
        "code": "GDPRCD",
        "display": "GDPR Consent Directive"
      }, {
        "code": "GDPRResearchCD",
        "display": "GDPR Research Consent Directive"
      }, {
        "code": "OIC",
        "display": "opt-in to personal information or effect collection in a registry or repository"
      }, {
        "code": "OIS",
        "display": "opt-in to personal information or effect sharing via a registry or repository"
      }, {
        "code": "OOC",
        "display": "opt-out of personal information or effect collection in a registry or repository"
      }, {
        "code": "OOS",
        "display": "opt-out of personal information or effect sharing via a registry or repository"
      }, {
        "code": "42CFRPart2CD",
        "display": "42 CFR Part 2 consent directive"
      }, {
        "code": "CompoundResearchCD",
        "display": "Compound HIPAA Research Authorization and Informed Consent for Research"
      }, {
        "code": "HIPAAAuthCD",
        "display": "HIPAA Authorization Consent Directive"
      }, {
        "code": "HIPAAConsentCD",
        "display": "HIPAA Consent Directive"
      }, {
        "code": "HIPAAResearchAuthCD",
        "display": "HIPAA Authorization for Disclosure for Research Consent Directive"
      }, {
        "code": "HIPAAROAD",
        "display": "HIPAA Right of Access Directive"
      }, {
        "code": "InformedAssentCD",
        "display": "Informed Assent for Research"
      }, {
        "code": "InformedConsentCD",
        "display": "Informed Consent for Research"
      }, {
        "code": "MDHHS-5515",
        "display": "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes"
      }, {
        "code": "MDHHS-5515MMHC",
        "display": "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-Michigan Mental Health Code"
      }, {
        "code": "MDHHS-5515Part2",
        "display": "Michigan Consent to Share Behavioral Health Information for Care Coordination Purposes-US 42 CFR Part 2"
      }, {
        "code": "JurisIP",
        "display": "jurisdictional information policy"
      }, {
        "code": "JurisCUI",
        "display": "jurisdictional controlled unclassified information policy"
      }, {
        "code": "JurisDEID",
        "display": "jurisdictional de-identified information poli"
      }, {
        "code": "JurisLDS",
        "display": "jurisdictional limited data set"
      }, {
        "code": "JurisNSI",
        "display": "jurisdictional non-sensitive information policy"
      }, {
        "code": "JurisPI",
        "display": "jurisdictional public information policy"
      }, {
        "code": "JurisSP-CUI",
        "display": "jurisdictional specified controlled unclassified information policy"
      }, {
        "code": "JurisUUI",
        "display": "jurisdictional uncontrolled unclassified information policy"
      }, {
        "code": "OrgIP",
        "display": "organizational information policy"
      }, {
        "code": "OrgCUI",
        "display": "organizational basic controlled unclassified information policy"
      }, {
        "code": "OrgDEID",
        "display": "organizational de-identified information policy"
      }, {
        "code": "OrgLDS",
        "display": "organizational limited data set information policy"
      }, {
        "code": "OrgNSI",
        "display": "organizational non-sensitive information policy"
      }, {
        "code": "OrgPI",
        "display": "organizational public information policy"
      }, {
        "code": "OrgSP-CUI",
        "display": "Organizational policy on collection, access, use, or disclosure of specified controlled unclassified information as defined by the organization or by applicable jurisdictional law."
      }, {
        "code": "OrgUUI",
        "display": "organizational uncontrolled unclassified information policy"
      }, {
        "code": "PersIP",
        "display": "personal information policy"
      }, {
        "code": "PersDEID",
        "display": "personal de-identified information policy"
      }, {
        "code": "PersLDS",
        "display": "personal limited data set information policy"
      }, {
        "code": "PersNSI",
        "display": "personal non-sensitive information policy"
      }, {
        "code": "PersPI",
        "display": "personal public information policy"
      }, {
        "code": "GDPRCONSENT",
        "display": "GDPR consent"
      }, {
        "code": "GDPRCONTRACT",
        "display": "GDPR contract"
      }, {
        "code": "GDPRLEGALCLAIM",
        "display": "GDPR legal claim"
      }, {
        "code": "GDPRLEGALOBL",
        "display": "GDPR legal obligation"
      }, {
        "code": "GDPRLEGITINTEREST",
        "display": "GDPR legitimate interest"
      }, {
        "code": "GDPRPUBLICHEALTH",
        "display": "GDPR public health"
      }, {
        "code": "GDPRPUBLICINTEREST",
        "display": "GDPR public interest"
      }, {
        "code": "GDPRRESEARCH",
        "display": "GDPR research"
      }, {
        "code": "GDPRHTHSOCSYS",
        "display": "GDPR health or social system management"
      }, {
        "code": "GDPRVITALINTEREST",
        "display": "GDPR vital interest"
      }, {
        "code": "32CFRPart2002",
        "display": "32 CFR Part 2002"
      }, {
        "code": "HIPAAAuth",
        "display": "HIPAA Authorization for Disclosure"
      }, {
        "code": "HIPAAConsent",
        "display": "HIPAA Consent"
      }, {
        "code": "HIPAAROA",
        "display": "HIPAA Right of Access"
      } ]
    } ]
  },
  "_filename": "ValueSet-valueset-privacy-policy.json",
  "package_name": "hl7.fhir.uv.security-label-ds4p",
  "date": "2020-03-30T00:00:00+00:00",
  "publisher": "HL7 International - Security Work Group",
  "jurisdiction": [ {
    "coding": [ {
      "code": "001",
      "system": "http://unstats.un.org/unsd/methods/m49/m49.htm"
    } ]
  } ],
  "name": "ValueSetPrivacyPolicy",
  "type": null,
  "experimental": null,
  "resourceType": "ValueSet",
  "title": "Privacy Policy ValueSet",
  "package_version": "0.1.0",
  "status": "draft",
  "id": "a8334e13-8658-4ee8-b762-af8020bd0ae1",
  "kind": null,
  "url": "http://hl7.org/fhir/uv/security-label-ds4p/ValueSet/valueset-privacy-policy",
  "version": "0.1.0",
  "contact": [ {
    "telecom": [ {
      "value": "http://hl7.org/Special/committees/secure",
      "system": "url"
    } ]
  } ]
}