FAST Consent Management FHIR IG (Jira PSS-2354)

Patient Consent management is the central component in a consent ecosystem and at the core of a scalable consent architecture. This project is about answering the question "is it possible to determine if payer/provider X have authority to view healthcare data Y about patient Z?". This FAST project will be dealing with how to handle the use cases across a set of consent management repositories in a scaleable fashion.

Our initial set of potential use cases are:

1. Provider-Initiated Request to Consent

2. Patient-Initiated Consent

3. Review Consent

4. File/Sign Consent

5. Delegate Consent

6. Revoke Consent

7. Propogation of Revocation

8. Disclosure Audit

9. Query Consent Decision

10. Enforce Consent Decision

NOTE: The actual authentication (is the consumer who they say they are) and data authorization (does the consumer have access to patient health data) is not in scope of this IG. We will provide the operations to gather and request consent and answer the question on whether a consumer has been granted consent to a patient's specific set healthcare data. The question of whether the consumer can actually access a patient's health data based on legal, corporate, and other policies and the granted consent is not in scope.

This project intends to create a FHIR Implementation Guide that details the consent management use cases as well as the required custom FHIR operations and profiles to exchange the required consent data elements both between the user and the consent mangement repository as well as between repositories.