{
  "package" : "hl7.fhir.r4.core@4.0.1",
  "definition" : "HIPAA 45 CFR Section 164.508 Uses and disclosures for which an authorization is required. (a) Standard: Authorizations for uses and disclosures. (1) Authorization required: General rule. Except as otherwise permitted or required by this subchapter, a covered entity SHALL not use or disclose protected health information without an authorization that is valid under this section. When a covered entity obtains or receives a valid authorization for its use or disclosure of protected health information, such use or disclosure must be consistent with such authorization. Usage Note: Authorizations governed under this regulation meet the definition of an opt in class of consent directive.",
  "system" : "http://terminology.hl7.org/CodeSystem/consentpolicycodes",
  "property" : [ ],
  "codesystem" : "3b441eff-8bdd-5654-a735-b214cf7cc2ff",
  "concept_id" : "7c59850e-b79f-581c-b1e0-a3e5ed8a9821",
  "ancestors" : {
    "hipaa-auth" : 0
  },
  "id" : "f4280d35-89fb-44f5-9b80-e82d1a426189",
  "code" : "hipaa-auth",
  "display" : "HIPAA Authorization",
  "version" : "4.0.1"
}