<?xml version="1.0" encoding="UTF-8"?>

<CodeSystem xmlns="http://hl7.org/fhir">
  <id value="extra-security-role-type"/>
  <meta>
    <lastUpdated value="2020-04-09T21:10:28.568+00:00"/>
    <profile value="http://hl7.org/fhir/StructureDefinition/shareablecodesystem"/>
  </meta>
  <text>
    <status value="generated"/><div xmlns="http://www.w3.org/1999/xhtml"><p>This case-sensitive code system <code>http://terminology.hl7.org/CodeSystem/extra-security-role-type</code> defines the following codes:</p><table class="codes"><tr><td style="white-space:nowrap"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td style="white-space:nowrap">authserver<a name="extra-security-role-type-authserver"> </a></td><td>Authorization Server</td><td>An entity providing authorization services to enable the electronic sharing of health-related information based on resource owner's preapproved permissions. For example, an UMA Authorization Server[UMA]</td></tr><tr><td style="white-space:nowrap">datacollector<a name="extra-security-role-type-datacollector"> </a></td><td>Data Collector</td><td>An entity that collects information over which the data subject may have certain rights under policy or law to control that information's management and distribution by data collectors, including the right to access, retrieve, distribute, or delete that information.</td></tr><tr><td style="white-space:nowrap">dataprocessor<a name="extra-security-role-type-dataprocessor"> </a></td><td>Data Processor</td><td>An entity that processes collected information over which the data subject may have certain rights under policy or law to control that information's management and distribution by data processors, including the right to access, retrieve, distribute, or delete that information.</td></tr><tr><td style="white-space:nowrap">datasubject<a name="extra-security-role-type-datasubject"> </a></td><td>Data Subject</td><td>A person whose personal information is collected or processed, and who may have certain rights under policy or law to control that information's management and distribution by data collectors or processors, including the right to access, retrieve, distribute, or delete that information.</td></tr><tr><td style="white-space:nowrap">humanuser<a name="extra-security-role-type-humanuser"> </a></td><td>Human User</td><td>The human user that has participated.</td></tr></table></div>
  </text>
  <url value="http://terminology.hl7.org/CodeSystem/extra-security-role-type"/>
  <version value="1.0.0"/>
  <name value="SecurityRoleType"/>
  <title value="Security Role Type"/>
  <status value="draft"/>
  <experimental value="true"/>
  <date value="2017-02-13"/>
  <publisher value="Health Level Seven International"/>
  <contact>
    <telecom>
      <system value="url"/>
      <value value="http://hl7.org"/>
    </telecom>
    <telecom>
      <system value="email"/>
      <value value="hq@HL7.org"/>
    </telecom>
  </contact>
  <description value="This CodeSystem contains Additional FHIR-defined Security Role types not defined elsewhere"/>
  <copyright value="This material derives from the HL7 Terminology (THO). THO is copyright ©1989+ Health Level Seven International and is made available under the CC0 designation. For more licensing information see: https://terminology.hl7.org/license"/>
  <caseSensitive value="true"/>
  <content value="complete"/>
  <concept>
    <code value="authserver"/>
    <display value="Authorization Server"/>
    <definition value="An entity providing authorization services to enable the electronic sharing of health-related information based on resource owner's preapproved permissions. For example, an UMA Authorization Server[UMA]"/>
  </concept>
  <concept>
    <code value="datacollector"/>
    <display value="Data Collector"/>
    <definition value="An entity that collects information over which the data subject may have certain rights under policy or law to control that information's management and distribution by data collectors, including the right to access, retrieve, distribute, or delete that information."/>
  </concept>
  <concept>
    <code value="dataprocessor"/>
    <display value="Data Processor"/>
    <definition value="An entity that processes collected information over which the data subject may have certain rights under policy or law to control that information's management and distribution by data processors, including the right to access, retrieve, distribute, or delete that information."/>
  </concept>
  <concept>
    <code value="datasubject"/>
    <display value="Data Subject"/>
    <definition value="A person whose personal information is collected or processed, and who may have certain rights under policy or law to control that information's management and distribution by data collectors or processors, including the right to access, retrieve, distribute, or delete that information."/>
  </concept>
  <concept>
    <code value="humanuser"/>
    <display value="Human User"/>
    <definition value="The human user that has participated."/>
  </concept>
</CodeSystem>