{
"package" : "hl7.terminology.r4@6.3.0",
"definition" : "A code representing U.S. Public Law 104-191 Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR Section 164.520), which stipulates an individual’s right to adequate notice of the uses and disclosures of protected health information that may be made by the covered entity, and of the individual's rights and the covered entity's legal duties with respect to protected health information. Relevant HIPAA Privacy Rule provisions are at Section 164.520 (a) Standard: Notice of privacy practices. https://www.gpo.gov/fdsys/pkg/CFR-2017-title45-vol1/pdf/CFR-2017-title45-vol1-sec164-520.pdf",
"system" : "http://terminology.hl7.org/CodeSystem/v2-0717",
"property" : [ {
"_uri" : "http://terminology.hl7.org/CodeSystem/utg-concept-properties#v2-concComment",
"code" : "v2-concComment",
"valueString" : "Used to indicate the legal authority for assigning security labels to HIPAA governed information. In this case, where collection, access, use, or disclosure of healthcare information is governed by a covered entity’s HIPAA Notice of Privacy Practices, use “HIPAANOPP” as the security label policy code.\r\n\r\n Information governed under a HIPAA Notice of Privacy Practices has the level of confidentiality protection afforded under the 45 CFR Section 164.506 - Uses and disclosures to carry out treatment, payment, or health care operations https://www.gpo.gov/fdsys/pkg/CFR-2017-title45-vol1/pdf/CFR-2017-title45-vol1-sec164-506.pdf , which is considered the “norm”, assign the HL7 Confidentiality code “N” (normal)."
}, {
"_uri" : "http://terminology.hl7.org/CodeSystem/utg-concept-properties#status",
"code" : "status",
"valueCode" : "N"
} ],
"codesystem" : "77f6cda3-8025-5825-90d9-b1c3b45a5a74",
"concept_id" : "61b88d5b-c337-5e0d-a91e-3e2066aaaa9f",
"ancestors" : {
"HIPAANOPP" : 0
},
"id" : "2671a720-b61d-4c0a-9f7b-4cd2f6fd4a19",
"code" : "HIPAANOPP",
"display" : "HIPAA notice of privacy practices",
"version" : "2.0.0"
}