{
  "package" : "hl7.terminology.r4@6.3.0",
  "definition" : "HIPAA 45 CFR Section 164.508 Uses and disclosures for which an authorization is required. (a) Standard: Authorizations for uses and disclosures. (1) Authorization required: General rule. Except as otherwise permitted or required by this subchapter, a covered entity SHALL not use or disclose protected health information without an authorization that is valid under this section. When a covered entity obtains or receives a valid authorization for its use or disclosure of protected health information, such use or disclosure must be consistent with such authorization. Usage Note: Authorizations governed under this regulation meet the definition of an opt in class of consent directive.",
  "system" : "http://terminology.hl7.org/CodeSystem/consentpolicycodes",
  "property" : [ ],
  "codesystem" : "520c2ace-ba8d-55db-8c74-d1dbc2247311",
  "concept_id" : "7c59850e-b79f-581c-b1e0-a3e5ed8a9821",
  "ancestors" : {
    "hipaa-auth" : 0
  },
  "id" : "4a85b8eb-1ff6-492c-8d51-3f535b97fae3",
  "code" : "hipaa-auth",
  "display" : "HIPAA Authorization",
  "version" : "3.0.1"
}