Enforcing consent directives on FHIR
summary
Demo shows a working Google Cloud Healthcare FHIR implementation that reads Consent resource in FHIR R4 and updates an access-control model via an applyConsents operation to enforce permit and deny rules at scale. Examples include provider-only treatment consent, observation-only research consent, spouse-all-resources consent, and a record-level deny for a psychiatric encounter. Enforcement and conflict resolution happen immediately after applying consents, and every access attempt is logged for audit.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:33Overview
- 3:26Web demo
- 6:28Scenario
- 7:10Demo
- 12:06Use case
- 13:03Create new consent
- 18:38Wrap up
related talks
31mFHIR & access control, deep dive into consent services
21mManaging dynamic study participation consents with FHIR
15mDeveloping Patient Access APIs at scale
43mConsent Based Access Control and Healthcare Data
45mApisecure, 14 & 15 March 2023 - John Moehrke, Co-Chair at Security Working Group.
01h 04mApisecure, 14 & 15 March 2023 - Grahame Grieve, Principal at Health Intersections Pty Ltd.
23mImplementing Provider Directory APIs
45mFHIR REST API