SecurityAndPrivacy
Class Policy

This is the abstract class from which all concrete policy classes in this policy information model are derived and instantiated. Because this class is abstract, it cannot be instantiated as a security policy for healthcare. However, it specifies the properties reused by all policies. [HL7 DAM]
A policy is a “set of legal, political, organizational, functional and technical obligations for communication and cooperation.” Policy governs the behavior of a system. [ISO 22600-2]
Policy encompasses jurisdictional, organizational, and Subject of Care (patient) policies. Organization and jurisdictional polices are instantiated as Basic Policy in both the security policy and privacy policy contexts. Basic Policy is discussed further later in this document. It should also be noted that privacy policy is controlled by the Subject of Care.
This class is derived from ISO 22600-2 and HL7 DAM.
"The references to the policies that are included in this consent scope. Policies may be organizational, but are often defined jurisdictionally, or in law." - HL7 FHIR, Consent.policy

Attributes
Authority authority authority

Pointer to the Organization (or other Entity) that issued the policy. This may be the provider organization that "owns" the patient record, or a jurisdiction that regulates how privacy is to be handled within its territory.
"Entity or Organization having regulatory jurisdiction or accountability for enforcing policies pertaining to Consent Directives." - HL7 FHIR, Consent.policy.authority

String description description

This attribute specifies the narrative description of the policy.

«IVL_TS» Period effectiveTime effectiveTime

The period of time (e.g., start date, end date) during which the privacy policy described by ePolicy is in effect.

«II» Id identifier identifier

Uniquely identifies the policy

String mimeType mimeType
String name name

A human discernible name for the policy

SecurityRole securityRole securityRole

Pointer to a named group of policies that can be managed, assigned, and revoked together for convenience of use rather than managing these policies individually.

«CS» Code status status

This attribute indicates whether the policy is active or not

String uri uri

The location of published policy.
"The references to the policies that are included in this consent scope. Policies may be organizational, but are often defined jurisdictionally, or in law." - HL7 FHIR, Consent.policy.uri


Properties:

Alias
Classifier Behavior
Is Abstracttrue
Is Activefalse
Is Leaffalse
Keywords
NamePolicy
Name Expression
NamespaceSecurityAndPrivacy
Owned Template Signature
OwnerSecurityAndPrivacy
Owning Template Parameter
PackageSecurityAndPrivacy
Qualified NameFHIM::SecurityAndPrivacy::Policy
Representation
Stereotype
Template Parameter
VisibilityPublic

Attribute Details

 authority
Public Authority authority

Pointer to the Organization (or other Entity) that issued the policy. This may be the provider organization that "owns" the patient record, or a jurisdiction that regulates how privacy is to be handled within its territory.
"Entity or Organization having regulatory jurisdiction or accountability for enforcing policies pertaining to Consent Directives." - HL7 FHIR, Consent.policy.authority

Constraints:
Properties:

AggregationNone
Alias
Associationpolicy_authority
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
Nameauthority
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::authority
Stereotype
Template Parameter
TypeAuthority
Upper*
Upper Value(*)
VisibilityPublic


 description
Public String description

This attribute specifies the narrative description of the policy.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity0..1
Namedescription
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::description
Stereotype
Template Parameter
TypeString
Upper1
Upper Value(1)
VisibilityPublic


 effectiveTime
Public «IVL_TS» Period effectiveTime

The period of time (e.g., start date, end date) during which the privacy policy described by ePolicy is in effect.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
NameeffectiveTime
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::effectiveTime
Stereotype
Template Parameter
Type«IVL_TS» Period
Upper1
Upper Value(1)
VisibilityPublic


 identifier
Public «II» Id identifier

Uniquely identifies the policy

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
Nameidentifier
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::identifier
Stereotype
Template Parameter
Type«II» Id
Upper1
Upper Value(1)
VisibilityPublic


 mimeType
Public String mimeType
Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity0..1
NamemimeType
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::mimeType
Stereotype
Template Parameter
TypeString
Upper1
Upper Value(1)
VisibilityPublic


 name
Public String name

A human discernible name for the policy

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
Namename
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::name
Stereotype
Template Parameter
TypeString
Upper1
Upper Value(1)
VisibilityPublic


 securityRole
Public SecurityRole securityRole

Pointer to a named group of policies that can be managed, assigned, and revoked together for convenience of use rather than managing these policies individually.

Constraints:
Properties:

AggregationNone
Alias
Associationpolicy_securityRole
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
NamesecurityRole
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::securityRole
Stereotype
Template Parameter
TypeSecurityRole
Upper*
Upper Value(*)
VisibilityPublic


 status
Public «CS» Code status

This attribute indicates whether the policy is active or not

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
Namestatus
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::status
Stereotype
Template Parameter
Type«CS» Code
Upper1
Upper Value(1)
VisibilityPublic


 uri
Public String uri

The location of published policy.
"The references to the policies that are included in this consent scope. Policies may be organizational, but are often defined jurisdictionally, or in law." - HL7 FHIR, Consent.policy.uri

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassPolicy
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity0..1
Nameuri
Name Expression
NamespacePolicy
Opposite
OwnerPolicy
Owning Association
Owning Template Parameter
Qualified NameFHIM::SecurityAndPrivacy::Policy::uri
Stereotype
Template Parameter
TypeString
Upper1
Upper Value(1)
VisibilityPublic

Comments