{
  "package" : "hl7.fhir.r4.examples@4.0.1",
  "definition" : "HIPAA 45 CFR Section 164.508 Uses and disclosures for which an authorization is required. (a) Standard: Authorizations for uses and disclosures. (1) Authorization required: General rule. Except as otherwise permitted or required by this subchapter, a covered entity SHALL not use or disclose protected health information without an authorization that is valid under this section. When a covered entity obtains or receives a valid authorization for its use or disclosure of protected health information, such use or disclosure must be consistent with such authorization. Usage Note: Authorizations governed under this regulation meet the definition of an opt in class of consent directive.",
  "system" : "http://terminology.hl7.org/CodeSystem/consentpolicycodes",
  "property" : [ ],
  "codesystem" : "2b0f32b3-04de-5a91-8f43-9edb69c0591a",
  "concept_id" : "7c59850e-b79f-581c-b1e0-a3e5ed8a9821",
  "ancestors" : {
    "hipaa-auth" : 0
  },
  "id" : "a6e18bfb-8153-4fdd-a019-9f276e4ab346",
  "code" : "hipaa-auth",
  "display" : "HIPAA Authorization",
  "version" : "4.0.1"
}