Bob Lou - Enforcing consent directives on FHIR | DevDays June 2022
In real production systems with numerous and complex consent directives, it is challenging to ensure correct enforcement of consent policies. A user that runs a FHIR search should only see results where patients have given consent to view their health information to the accessing user. With a large number of FHIR resources and consent policies, scalability becomes a concern. Moreover, consent policies can conflict; for example, a patient can specify a consent directive to deny access to their records to all users for all purposes, but then later specify a conflicting consent to allow access for the purpose of medical treatment. This community talk discusses how the Consent resource in FHIR R4 can be used as a machine readable format to automatically enforce consent policies with scalability and correctness. .
-------------------------------------------------------------
🔥 Join us in one of the upcoming editions of FHIR DevDays: https://www.devdays.com
👩🏫 Also there, you can also find the slide decks and exercises for previous editions.
