This page is part of the US Quality Core (v0.5.0: Release) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version in its permanent home (it will always be available at this URL). For a full list of available versions, see the Directory of published versions

Privacy, Security, and Consent

Quality applications may make use of patient-specific information. For this reason, all transactions must be appropriately secured, limiting access to authorized individuals and protecting data while in transit (as laid out in the FHIR Implementer's Safety Check List). These considerations relate to any FHIR implementation, including authentication, authorization, access control consistent with patient consent, transaction logging, and following best practices.

The US Core 6.1.0 Security section provides additional expectations that apply to this guide.