EN 13606-4:2007

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Symbols and abbreviations
5 Conformance
6 Record Component Sensitivity and Functional Roles (Normative)
  6.1 RECORD_COMPONENT sensitivity
  6.2 Functional Roles
  6.3 Mapping of Functional Role to RECORD_COMPONENT Sensitivity
7 Representing access policy information within an EHR_EXTRACT
  7.1 General
  7.2 Archetype of the Access policy COMPOSITION
  7.3 ADL representation of the archetype of the access policy
       COMPOSITION
  7.4 UML representation of the archetype of the access policy
       COMPOSITION
8 Representation of audit log information
  8.1 EHR_AUDIT_LOG_EXTRACT model
Annex A (informative) - Illustrative access control example
Annex B (informative) - Relationship of this part standard
        to the Distribution Rules: ENV 13606-3:2000
Bibliography

This part of this multipart standard on Electronic Health Record Communication describes a methodology for specifying the privileges necessary to access EHR data. This methodology forms part of the overall EHR communications architecture defined in Part 1 of this standard.This standard seeks to address those requirements uniquely pertaining to EHR communications and to represent and communicate EHR-specific information that will inform an access decision. It also refers to general security requirements that apply to EHR communications and points at technical solutions and standards that specify details on services meeting these security needs.NOTESecurity requirements for EHR systems not related to the communication of EHRs are outside the scope of this standard.