v3-Confidentiality
type: CodeSystem
node role: treeRoot
id:
  v: v3-Confidentiality
language:
  v: en
text:
  status:
    v: generated
  div: Properties This code system defines the following properties for its concepts Code URI Type Description Specializes Coding The child code is a more narrow version of the concept represented by the parent code. I.e. Every child concept is also a valid parent concept. Used to allow determination of subsumption. Must be transitive, irreflexive, antisymmetric. Generalizes Coding Inverse of Specializes. Only included as a derived relationship. internalId http://terminology.hl7.org/CodeSystem/utg-concept-properties#v3-internal-id code The internal identifier for the concept in the HL7 Access database repository. status http://hl7.org/fhir/concept-properties#status code A property that indicates the status of the concept. One of active, experimental, deprecated, or retired. deprecationDate http://hl7.org/fhir/concept-properties#deprecationDate dateTime The date at which a concept was deprecated. Concepts that are deprecated but not inactive can still be used, but their use is discouraged. notSelectable http://hl7.org/fhir/concept-properties#notSelectable boolean Indicates that the code is abstract - only intended to be used as a selector for other concepts Concepts This case-sensitive code system http://terminology.hl7.org/CodeSystem/v3-Confidentiality defines the following codes in a Is-A hierarchy: Lvl Code Display Definition internalId status Not Selectable 1 _Confidentiality Confidentiality A specializable code and its leaf codes used in Confidentiality value sets to value the Act.Confidentiality and Role.Confidentiality attribute in accordance with the definition for concept domain "Confidentiality". 23320 active 2 L low Privacy metadata indicating that a low level of protection is required to safeguard personal and healthcare information, which has been altered in such a way as to minimize the need for confidentiality protections with some residual risks associated with re-linking. The risk of harm to an individual's reputation and sense of privacy if disclosed witho…
url:
  v: http://terminology.hl7.org/CodeSystem/v3-Confidentiality
identifier:
  system:
    v: urn:ietf:rfc:3986
  value:
    v: urn:oid:2.16.840.1.113883.5.25
version:
  v: 3.0.0
name:
  v: Confidentiality
title:
  v: Confidentiality
status:
  v: active
experimental:
  v: false
date:
  v: 2023-05-30
publisher:
  v: Health Level Seven International
contact:
  telecom:
    system:
      v: url
    value:
      v: http://hl7.org
  telecom:
    system:
      v: email
description:
  v: A set of codes specifying the security classification of acts and roles in accordance with the definition for concept domain "Confidentiality".
copyright:
  v: This material derives from the HL7 Terminology THO. THO is copyright ©1989+ Health Level Seven International and is made available under the CC0 designation. For more licensing information see: https://terminology.hl7.org/license
case sensitive:
  v: true
hierarchy meaning:
  v: is-a
content:
  v: complete
property:
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-symmetry
    value:
      v: antisymmetric
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-transitivity
    value:
      v: transitive
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-reflexivity
    value:
      v: irreflexive
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-isNavigable
    value:
      v: true
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-relationshipKind
    value:
      v: Specializes
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-inverseName
    value:
      v: Generalizes
  code:
    v: Specializes
  description:
    v: The child code is a more narrow version of the concept represented by the parent code. I.e. Every child concept is also a valid parent concept. Used to allow determination of subsumption. Must be transitive, irreflexive, antisymmetric.
  type:
    v: Coding
property:
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-symmetry
    value:
      v: antisymmetric
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-transitivity
    value:
      v: transitive
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-reflexivity
    value:
      v: irreflexive
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-isNavigable
    value:
      v: true
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-relationshipKind
    value:
      v: Generalizes
  extension:
    url:
      v: http://terminology.hl7.org/StructureDefinition/ext-mif-relationship-inverseName
    value:
      v: Specializes
  code:
    v: Generalizes
  description:
    v: Inverse of Specializes. Only included as a derived relationship.
  type:
    v: Coding
property:
  code:
    v: internalId
  uri:
    v: http://terminology.hl7.org/CodeSystem/utg-concept-properties#v3-internal-id
  description:
    v: The internal identifier for the concept in the HL7 Access database repository.
  type:
    v: code
property:
  code:
    v: status
  uri:
    v: http://hl7.org/fhir/concept-properties#status
  description:
    v: A property that indicates the status of the concept. One of active, experimental, deprecated, or retired.
  type:
    v: code
property:
  code:
    v: deprecationDate
  uri:
    v: http://hl7.org/fhir/concept-properties#deprecationDate
  description:
    v: The date at which a concept was deprecated. Concepts that are deprecated but not inactive can still be used, but their use is discouraged.
  type:
    v: dateTime
property:
  code:
    v: notSelectable
  uri:
    v: http://hl7.org/fhir/concept-properties#notSelectable
  description:
    v: Indicates that the code is abstract - only intended to be used as a selector for other concepts
  type:
    v: boolean
concept:
  code:
    v: _Confidentiality
  display:
    v: Confidentiality
  definition:
    v: A specializable code and its leaf codes used in Confidentiality value sets to value the Act.Confidentiality and Role.Confidentiality attribute in accordance with the definition for concept domain "Confidentiality".
  property:
    code:
      v: status
    value:
      v: active
  property:
    code:
      v: internalId
    value:
      v: 23320
  concept:
    code:
      v: L
    display:
      v: low
    definition:
      v: Privacy metadata indicating that a low level of protection is required to safeguard personal and healthcare information, which has been altered in such a way as to minimize the need for confidentiality protections with some residual risks associated with re-linking. The risk of harm to an individual's reputation and sense of privacy if disclosed without authorization is considered negligible, and mitigations are in place to address reidentification risk. *Usage Note:* The level of protection afforded anonymized and pseudonymized, and non-personally identifiable information (e.g., a limited data set) is dictated by privacy policies and data use agreements intended to engender trust that health information can be used and disclosed with little or no risk of re-identification. **Example:** Personal and healthcare information, which excludes 16 designated categories of direct identifiers in a HIPAA Limited Data Set. This information may be disclosed by HIPAA Covered Entities without patient authorization for a research, public health, and operations purposes if conditions are met, which includes obtaining a signed data use agreement from the recipient. See 45 CFR Section 164.514. This metadata indicates that the receiver may have an obligation to comply with a data use agreement with the discloser. The discloser may have obligations to comply with policies dictating the methods for de-identification. Confidentiality code total order hierarchy: Low (L) is less protective than *V, R, N,* and *M*, and subsumes *U*.
    property:
      code:
        v: status
      value:
        v: active
    property:
      code:
        v: internalId
      value:
        v: 10234
  concept:
    code:
      v: M
    display:
      v: moderate
    definition:
      v: Privacy metadata indicating the level of protection required to safeguard personal and healthcare information, which if disclosed without authorization, would present a moderate risk of harm to an individual's reputation and sense of privacy. *Usage Note:* The level of protection afforded moderately confidential information is dictated by privacy policies intended to engender trust in a service provider. May include publicly available information in jurisdictions that restrict uses of that information without the consent of the data subject. Privacy policies mandating moderate levels of protection, which preempt less protective privacy policies. "Moderate" confidentiality policies differ from and would be preempted by the prevailing privacy policies mandating the normative level of protection for information used in the delivery and management of healthcare. Confidentiality code total order hierarchy: Moderate (M) is less protective than *V, R, and N*, and subsumes all other protection levels (i.e., *L* and *U*). **Examples:** Includes personal and health information that an individual authorizes to be collected, accessed, used or disclosed to a bank for a health credit card or savings account; to health oversight authorities; to a hospital patient directory; to worker compensation, disability, property and casualty or life insurers; and to personal health record systems, consumer-controlled devices, social media accounts and online Apps; or for marketing purposes
    property:
      code:
        v: status

v: active

code:
  v: internalId
value:
  v: 23322

code:
  v: N
display:
  v: normal
definition:
  v: Privacy metadata indicating the level of protection required to safeguard personal and healthcare information, which if disclosed without authorization, would present a considerable risk of harm to an individual's reputation and sense of privacy. *Usage Note:* The level of protection afforded normatively confidential information is dictated by the prevailing normative privacy policies, which are intended to engender patient trust in their healthcare providers. Privacy policies mandating normative levels of protection, which preempt less protective privacy policies when the information is used in the delivery and management of healthcare. May be pre-empted by jurisdictional law (e.g., for public health reporting or emergency treatment). Confidentiality code total order hierarchy: Normal (N) is less protective than *V* and *R*, and subsumes all other protection levels (i.e., *M, L, and U*). **Map:**Partial Map to ISO 13606-4 Sensitivity Level (3) Clinical Care when purpose of use is treatment: Default for normal clinical care access (i.e., most clinical staff directly caring for the patient should be able to access nearly all of the EHR). Maps to normal confidentiality for treatment information but not to ancillary care, payment and operations. **Examples:** n the US, this includes what HIPAA identifies as protected health information (PHI) under 45 CFR Section 160.103.
property:
  code:
    v: status
  value:
    v: active
property:
  code:
    v: internalId
  value:
    v: 10230

code:
  v: R
display:
  v: restricted
definition:
  v: Privacy metadata indicating the level of protection required to safeguard potentially stigmatizing information, which if disclosed without authorization, would present a high risk of harm to an individual's reputation and sense of privacy. *Usage Note:* The level of protection afforded restricted confidential information is dictated by specially protective organizational or jurisdictional privacy policies, including at an authorized individual's request, intended to engender patient trust in providers of sensitive services. Privacy policies mandating additional levels of protection by restricting information access preempt less protective privacy policies when the information is used in the delivery and management of healthcare. May be pre-empted by jurisdictional law (e.g., for public health reporting or emergency treatment). Confidentiality code total order hierarchy: Restricted (R) is less protective than *V*, and subsumes all other protection levels (i.e., *N, M, L, and U*). **Examples:** Includes information that is additionally protected such as sensitive conditions mental health, HIV, substance abuse, domestic violence, child abuse, genetic disease, and reproductive health; or sensitive demographic information such as a patient's standing as an employee or a celebrity. May be used to indicate proprietary or classified information that is not related to an individual (e.g., secret ingredients in a therapeutic substance; or the name of a manufacturer).
property:
  code:
    v: status
  value:
    v: active
property:
  code:
    v: internalId
  value:
    v: 10232

code:
  v: U
display:
  v: unrestricted
definition:
  v: Privacy metadata indicating that no level of protection is required to safeguard personal and healthcare information that has been disclosed by an authorized individual without restrictions on its use. **Examples:** Includes publicly available information e.g., business name, phone, email and physical address. *Usage Note:* The authorization to collect, access, use, and disclose this information may be stipulated in a contract of adhesion by a data user (e.g., via terms of service or data user privacy policies) in exchange for the data subject's use of a service. This metadata indicates that the receiver has no obligation to consider privacy policies other than its own when making access control decisions. This metadata indicates that the receiver has no obligation to consider privacy policies other than its own when making access control decisions. Confidentiality code total order hierarchy: Unrestricted (U) is less protective than *V, R, N, M,* and *L*, and is the lowest protection levels.
property:
  code:
    v: status
  value:
    v: active
property:
  code:
    v: internalId
  value:
    v: 23321

code:
  v: V
display:
  v: very restricted
definition:
  v: Privacy metadata indicating the level of protection required under atypical cicumstances to safeguard potentially damaging or harmful information, which if disclosed without authorization, would (1) present an extremely high risk of harm to an individual's reputation, sense of privacy, and possibly safety; or (2) impact an individual's or organization's legal matters. *Usage Note:* The level of protection afforded very restricted confidential information is dictated by specially protective privacy or legal policies intended to ensure that under atypical circumstances additional protections limit access to only those with a high 'need to know' and the information is kept in highest confidence.. Privacy and legal policies mandating the highest level of protection by stringently restricting information access, preempt less protective privacy policies when the information is used in the delivery and management of healthcare including legal proceedings related to healthcare. May be pre-empted by jurisdictional law (e.g., for public health reporting or emergency treatment but only under limited circumstances). Confidentiality code total order hierarchy: Very Restricted (V) is the highest protection level and subsumes all other protection levels s (i.e., *R, N, M, L, and UI*). **Examples:** Includes information about a victim of abuse, patient requested information sensitivity, and taboo subjects relating to health status that must be discussed with the patient by an attending provider before sharing with the patient. May also include information held under a legal hold or attorney-client privilege.
property:
  code:
    v: status
  value:
    v: active
property:
  code:
    v: internalId
  value:
    v: 14799

code:
  v: _ConfidentialityByAccessKind
display:
  v: ConfidentialityByAccessKind
definition:
  v: **Description:** By accessing subject / role and relationship based rights (These concepts are mutually exclusive, one and only one is required for a valid confidentiality coding.) *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
property:
  code:
    v: notSelectable
  value:
    v: true
property:
  code:
    v: status
  value:
    v: retired
property:
  code:
    v: internalId
  value:
    v: 21049
concept:
  code:
    v: B
  display:
    v: business
  definition:
    v: **Description:** Since the service class can represent knowledge structures that may be considered a trade or business secret, there is sometimes (though rarely) the need to flag those items as of business level confidentiality. However, no patient related information may ever be of this confidentiality level. *Deprecation Comment:* Replced by ActCode.B
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10235
concept:
  code:
    v: D
  display:
    v: clinician
  definition:
    v: **Description:** Only clinicians may see this item, billing and administration persons can not access this item without special permission. *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10231
concept:
  code:
    v: I
  display:
    v: individual
  definition:
    v: **Description:** Access only to individual persons who are mentioned explicitly as actors of this service and whose actor type warrants that access (cf. to actor type code). *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10233

code:
  v: _ConfidentialityByInfoType
display:
  v: ConfidentialityByInfoType
definition:
  v: **Description:** By information type, only for service catalog entries (multiples allowed). Not to be used with actual patient data! *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
property:
  code:
    v: notSelectable
  value:
    v: true
property:
  code:
    v: status
  value:
    v: retired
property:
  code:
    v: internalId
  value:
    v: 21050
concept:
  code:
    v: ETH
  display:
    v: substance abuse related
  definition:
    v: **Description:** Alcohol/drug-abuse related item *Deprecation Comment:*Replced by ActCode.ETH
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10243
concept:
  code:
    v: HIV
  display:
    v: HIV related
  definition:
    v: **Description:** HIV and AIDS related item *Deprecation Comment:*Replced by ActCode.HIV
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10241
concept:
  code:
    v: PSY
  display:
    v: psychiatry relate
  definition:
    v: **Description:** Psychiatry related item *Deprecation Comment:*Replced by ActCode.PSY
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10242
concept:
  code:
    v: SDV
  display:
    v: sexual and domestic violence related
  definition:
    v: **Description:** Sexual assault / domestic violence related item *Deprecation Comment:*Replced by ActCode.SDV
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10244

code:
  v: _ConfidentialityModifiers
display:
  v: ConfidentialityModifiers
definition:
  v: **Description:** Modifiers of role based access rights (multiple allowed) *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
property:
  code:
    v: notSelectable
  value:
    v: true
property:
  code:
    v: status
  value:
    v: retired
property:
  code:
    v: internalId
  value:
    v: 21051
concept:
  code:
    v: C
  display:
    v: celebrity
  definition:
    v: **Description:** Celebrities are people of public interest (VIP) including employees, whose information require special protection. *Deprecation Comment:*Replced by ActCode.CEL
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10239
concept:
  code:
    v: S
  display:
    v: sensitive
  definition:
    v: **Description:** Information for which the patient seeks heightened confidentiality. Sensitive information is not to be shared with family members. Information reported by the patient about family members is sensitive by default. Flag can be set or cleared on patient's request. *Deprecation Comment:*Deprecated due to updated confidentiality codes under ActCode
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10237
concept:
  code:
    v: T
  display:
    v: taboo
  definition:
    v: **Description:** Information not to be disclosed or discussed with patient except through physician assigned to patient in this case. This is usually a temporary constraint only, example use is a new fatal diagnosis or finding, such as malignancy or HIV. *Deprecation Note:*Replced by ActCode.TBOO
  property:
    code:
      v: status
    value:
      v: retired
  property:
    code:
      v: internalId
    value:
      v: 10238