diff --git a/specification/examples/requests/PATCH_Consent/multiple_updates.yaml b/specification/examples/requests/PATCH_Consent/multiple_updates.yaml new file mode 100644 index 00000000..bbe7442e --- /dev/null +++ b/specification/examples/requests/PATCH_Consent/multiple_updates.yaml @@ -0,0 +1,22 @@ +MultipleUpdates: + summary: Set status to active with an end date + description: | + Example of a combined update to a record. + The status will be changed to active. + The relationship will be considered as ended following this date. + value: + - op: replace + path: /status + value: active + - op: add + path: /extension/- + value: + - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason + valueCodeableConcept: + coding: + - system: http://terminology.hl7.org/CodeSystem/consent-reason + code: "ROLE_ACTIVATED" + display: "Role activated" + - op: add + path: /provision/period/end + value: "2026-12-31T23:59:59Z" diff --git a/specification/examples/requests/PATCH_Consent/replace_legal_basis.yaml b/specification/examples/requests/PATCH_Consent/replace_legal_basis.yaml new file mode 100644 index 00000000..e69de29b diff --git a/specification/examples/responses/GET_Consent/filtered-relationships-status-active-include-details.yaml b/specification/examples/responses/GET_Consent/filtered-relationships-status-active-include-details.yaml index c4686c3f..3d9fb7f7 100644 --- a/specification/examples/responses/GET_Consent/filtered-relationships-status-active-include-details.yaml +++ b/specification/examples/responses/GET_Consent/filtered-relationships-status-active-include-details.yaml @@ -88,7 +88,7 @@ ConsentMultipleRelationshipsStatusActiveIncludeDetailsBundle: dateTime: "2024-07-21T17:32:28Z" policy: - authority: "https://www.england.nhs.uk" - uri: "REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -99,6 +99,8 @@ ConsentMultipleRelationshipsStatusActiveIncludeDetailsBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -193,7 +195,7 @@ ConsentMultipleRelationshipsStatusActiveIncludeDetailsBundle: dateTime: "2024-07-21T17:32:28Z" policy: - authority: "https://www.england.nhs.uk" - uri: "REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -204,6 +206,8 @@ ConsentMultipleRelationshipsStatusActiveIncludeDetailsBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/filtered-relationships-status-inactive.yaml b/specification/examples/responses/GET_Consent/filtered-relationships-status-inactive.yaml index aa4b1ea6..6a2473be 100644 --- a/specification/examples/responses/GET_Consent/filtered-relationships-status-inactive.yaml +++ b/specification/examples/responses/GET_Consent/filtered-relationships-status-inactive.yaml @@ -31,8 +31,8 @@ ConsentMultipleRelationshipsStatusInactiveBundle: value: '9000000006' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentMultipleRelationshipsStatusInactiveBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -84,8 +86,8 @@ ConsentMultipleRelationshipsStatusInactiveBundle: value: '9000000007' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -96,6 +98,8 @@ ConsentMultipleRelationshipsStatusInactiveBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/filtered-relationships-status-proposed-active.yaml b/specification/examples/responses/GET_Consent/filtered-relationships-status-proposed-active.yaml index c925499c..3cb99a6c 100644 --- a/specification/examples/responses/GET_Consent/filtered-relationships-status-proposed-active.yaml +++ b/specification/examples/responses/GET_Consent/filtered-relationships-status-proposed-active.yaml @@ -31,8 +31,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: value: '9000000009' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -90,18 +92,20 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: value: '9000000005' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: - reference: identifier: - system: https://fhir.nhs.uk/Id/nhs-number + system: 'https://fhir.nhs.uk/Id/nhs-number' value: '9000000017' period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -149,8 +153,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: value: '9000000020' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -161,6 +165,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -208,8 +214,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: value: '9000000021' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -220,6 +226,8 @@ ConsentMultipleRelationshipsStatusProposedActiveBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-include-patient.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-include-patient.yaml index 6118be44..12aa3fb8 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-include-patient.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-include-patient.yaml @@ -63,8 +63,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: value: "9000000009" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -75,6 +75,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -150,8 +152,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: value: "9000000005" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -162,6 +164,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -237,8 +241,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: value: "9000000006" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -249,6 +253,8 @@ ConsentMultipleRelationshipsIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-include-performer-patient.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-include-performer-patient.yaml index 55990492..99b243c7 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-include-performer-patient.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-include-performer-patient.yaml @@ -87,8 +87,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: value: "9000000009" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -99,6 +99,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -193,8 +195,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: value: "9000000005" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -205,6 +207,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -299,8 +303,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: value: "9000000006" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -311,6 +315,8 @@ ConsentMultipleRelationshipsIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-include-performer.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-include-performer.yaml index 48e91fba..fdf4cdba 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-include-performer.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-include-performer.yaml @@ -56,8 +56,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: value: '9000000009' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -68,6 +68,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -135,8 +137,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: value: '9000000005' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -147,6 +149,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -214,8 +218,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: value: '9000000006' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -226,6 +230,8 @@ ConsentMultipleRelationshipsIncludePerformerBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-patient.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-patient.yaml index 4940c89a..36e63769 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-patient.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-patient.yaml @@ -60,8 +60,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -72,6 +72,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -118,8 +120,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -130,6 +132,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -176,8 +180,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -188,6 +192,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer-patient.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer-patient.yaml index efc18a0a..e78a842c 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer-patient.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer-patient.yaml @@ -82,8 +82,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -94,6 +94,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -158,8 +160,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -170,6 +172,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -234,8 +238,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: "9000000100" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -246,6 +250,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: "2026-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer.yaml index 593ebf55..e2436536 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient-include-performer.yaml @@ -53,8 +53,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -65,6 +65,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -129,8 +131,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -141,6 +143,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -205,8 +209,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -217,6 +221,8 @@ ConsentMultipleRelationshipsSinglePatientIncludePerformerPatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient.yaml b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient.yaml index 30c14904..0a9e96e8 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships-single-patient.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships-single-patient.yaml @@ -31,8 +31,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -89,8 +91,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -101,6 +103,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -147,8 +151,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: value: '9000000100' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -159,6 +163,8 @@ ConsentMultipleRelationshipsSinglePatientBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/multiple-relationships.yaml b/specification/examples/responses/GET_Consent/multiple-relationships.yaml index 768617a5..68cbd7bd 100644 --- a/specification/examples/responses/GET_Consent/multiple-relationships.yaml +++ b/specification/examples/responses/GET_Consent/multiple-relationships.yaml @@ -31,8 +31,8 @@ ConsentMultipleRelationshipsBundle: value: '9000000009' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentMultipleRelationshipsBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -89,8 +91,8 @@ ConsentMultipleRelationshipsBundle: value: '9000000005' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -101,6 +103,8 @@ ConsentMultipleRelationshipsBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: @@ -147,8 +151,8 @@ ConsentMultipleRelationshipsBundle: value: '9000000006' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -159,6 +163,8 @@ ConsentMultipleRelationshipsBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-patient.yaml b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-patient.yaml index 1f2011fa..271403c9 100644 --- a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-patient.yaml +++ b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-patient.yaml @@ -60,8 +60,8 @@ ConsentSingleConsentingAdultRelationshipIncludePatientBundle: value: "9000000005" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -72,6 +72,8 @@ ConsentSingleConsentingAdultRelationshipIncludePatientBundle: period: end: "2029-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer-patient.yaml b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer-patient.yaml index 72d243a2..7908be39 100644 --- a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer-patient.yaml +++ b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer-patient.yaml @@ -81,8 +81,8 @@ ConsentSingleConsentingAdultRelationshipIncludePerformerPatientBundle: value: "9000000005" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -93,6 +93,8 @@ ConsentSingleConsentingAdultRelationshipIncludePerformerPatientBundle: period: end: "2029-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer.yaml b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer.yaml index 7957a585..166d4602 100644 --- a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer.yaml +++ b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship-include-performer.yaml @@ -51,8 +51,8 @@ ConsentSingleConsentingAdultRelationshipIncludePerformerBundle: value: '9000000005' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -63,6 +63,8 @@ ConsentSingleConsentingAdultRelationshipIncludePerformerBundle: period: end: "2029-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship.yaml b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship.yaml index 423399b1..e9bdb248 100644 --- a/specification/examples/responses/GET_Consent/single-consenting-adult-relationship.yaml +++ b/specification/examples/responses/GET_Consent/single-consenting-adult-relationship.yaml @@ -31,8 +31,8 @@ ConsentSingleConsentingAdultRelationshipBundle: value: '9000000005' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentSingleConsentingAdultRelationshipBundle: period: end: '2026-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-patient.yaml b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-patient.yaml index 51011e78..ea945f73 100644 --- a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-patient.yaml +++ b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-patient.yaml @@ -60,8 +60,8 @@ ConsentSingleAdultChildRelationshipIncludePatientBundle: value: "9000000009" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -69,6 +69,8 @@ ConsentSingleAdultChildRelationshipIncludePatientBundle: identifier: system: https://fhir.nhs.uk/Id/nhs-number value: '9000000019' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer-patient.yaml b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer-patient.yaml index 6572d0fe..13424880 100644 --- a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer-patient.yaml +++ b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer-patient.yaml @@ -85,8 +85,8 @@ ConsentSingleAdultChildRelationshipIncludePerformerPatientBundle: value: "9000000009" dateTime: "2024-07-21T17:32:28Z" policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: "https://www.england.nhs.uk" + uri: "https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services" provision: type: permit actor: @@ -97,6 +97,8 @@ ConsentSingleAdultChildRelationshipIncludePerformerPatientBundle: period: end: "2029-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer.yaml b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer.yaml index e54189fb..337ee62f 100644 --- a/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer.yaml +++ b/specification/examples/responses/GET_Consent/single-mother-child-relationship-include-performer.yaml @@ -54,8 +54,8 @@ ConsentSingleAdultChildRelationshipIncludePerformerBundle: value: '9000000009' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -66,6 +66,8 @@ ConsentSingleAdultChildRelationshipIncludePerformerBundle: period: end: "2029-02-11" start: "2025-02-11" + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-mother-child-relationship-unknown-legal-basis.yaml b/specification/examples/responses/GET_Consent/single-mother-child-relationship-unknown-legal-basis.yaml index d28196b6..5a9287aa 100644 --- a/specification/examples/responses/GET_Consent/single-mother-child-relationship-unknown-legal-basis.yaml +++ b/specification/examples/responses/GET_Consent/single-mother-child-relationship-unknown-legal-basis.yaml @@ -31,8 +31,8 @@ ConsentSingleAdultChildRelationshipUnknownLegalBasisBundle: value: '9000000119' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' code: unknown display: Unknown legal basis provision: @@ -46,6 +46,8 @@ ConsentSingleAdultChildRelationshipUnknownLegalBasisBundle: period: start: '2025-02-11' end: '2026-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason valueCodeableConcept: diff --git a/specification/examples/responses/GET_Consent/single-mother-child-relationship.yaml b/specification/examples/responses/GET_Consent/single-mother-child-relationship.yaml index ed0c1f04..a96d5fbe 100644 --- a/specification/examples/responses/GET_Consent/single-mother-child-relationship.yaml +++ b/specification/examples/responses/GET_Consent/single-mother-child-relationship.yaml @@ -31,8 +31,8 @@ ConsentSingleAdultChildRelationshipBundle: value: '9000000009' dateTime: '2024-07-21T17:32:28Z' policy: - - authority: https://www.england.nhs.uk - uri: REPLACE_WITH_LINK_TO_PUBLISHED_NATIONAL_PROXY_STANDARD + - authority: 'https://www.england.nhs.uk' + uri: 'https://digital.nhs.uk/data-and-information/information-standards/governance/latest-activity/standards-and-collections/dapb3051-identity-verification-and-authentication-standard-for-digital-health-and-care-services' provision: type: permit actor: @@ -43,6 +43,8 @@ ConsentSingleAdultChildRelationshipBundle: period: end: '2029-02-11' start: '2025-02-11' + meta: + lastUpdated: '2025-02-17T14:30:00Z' extension: - url: "http://hl7.org/fhir/5.0/StructureDefinition/extension-Consent.regulatoryBasis" valueCodeableConcept: diff --git a/specification/validated-relationships-service-api.yaml b/specification/validated-relationships-service-api.yaml index f0f106b8..b782975c 100644 --- a/specification/validated-relationships-service-api.yaml +++ b/specification/validated-relationships-service-api.yaml @@ -6,31 +6,28 @@ info: version: "1.16.0" description: | ## Overview - Use this API to access the Validated Relationships Service - the national electronic database of relationships - that have been verified for the purpose of enabling citizens to access patient facing services on behalf of - (as a proxy for) patients they care for. - - The relationships held by this service are strictly for the purpose of enabling access to healthcare services. - This is in contrast to the relationships held by the Personal Demographics Service (PDS), which are largely to - support the provision of direct care. - - You can: - - - get verified relationships (to support decision making when granting proxy access) - - create a new proxy access request - - get proxy roles - - In the future you will be able to: - - - update a proxy access request - - update a proxy relationship - - delete (revoke) a proxy relationship + This service underpins the National Proxy Programme whose core objective is to allow Patients to be supported with + their healthcare by someone they trust (a Proxy) as part of a digitally-enabled journey. The service has two core + uses. Firstly, it surfaces verified candidate relationships (i.e. indicates suitable Proxies for a Patient such as + Birth Mothers) to support GP’s decision-making when granting Proxy access. Secondly, it supports the subsequent + creation, use and management of Proxy roles which are stored in a central, national database. The Proxy roles held + by the database are strictly for the purpose of enabling access to healthcare services, initially in Primary Care. + + With this service you can: + + - Create a new Proxy access request (Submit an online application via NHS App) + - View Pending Proxy access requests + - Get verified candidate relationships (to support decision making when granting proxy access) + - Create a Proxy role + - Get Proxy roles + - Get a Proxy role by ID + - Update (or revoke) a Proxy role ## Who can use this API This API can only be used where there is a legal basis to do so. Make sure you have this and a valid use case before - you go too far with your development by [contacting us](https://digital.nhs.uk/developer/help-and-support) + you go too far with your development by [contacting us](https://digital.nhs.uk/developer/help-and-support). - You must do this before you can go live (see 'Onboarding' below). + You must do this before you can go live (see the 'Onboarding' section below). ## Related APIs The following APIs are related to this API: @@ -60,6 +57,12 @@ info: There are [libraries and SDKs available](https://digital.nhs.uk/developer/guides-and-documentation/api-technologies-at-nhs-digital#fhir-libraries-and-sdks) to help with FHIR API integration. + ## Guidance for developers + + Supplementary documentation and guidance for developers: + + - National Proxy Service developer documentation (link to be added) + ## Network access This API is available on the internet. @@ -77,6 +80,8 @@ info: For more information on access modes and how to use them, see the developer [security and authorisation guide](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation). + Each API operation section of this documentation indicates the access modes that the endpoint supports. + ### User-restricted access User-restricted access meaning an end user must be present, authenticated and authorised. @@ -86,7 +91,8 @@ info: [Review all patient access modes](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation#patient-access-mode) - Validated Relationships Service API checks the patient is P9 verified and has a high [vector of trust](https://nhsconnect.github.io/nhslogin/vectors-of-trust/) (VOT). + All API endpoints that support this access mode require that the user has proven their identity to a high level + and authenticated using strong authentication credentials. The combination of these forms a [Vector of Trust](https://nhsconnect.github.io/nhslogin/vectors-of-trust/) profile. Allowed vectors of trust are: - `P9.Cp.Cd` @@ -94,13 +100,15 @@ info: - `P9.Cm` #### Healthcare worker access mode - If the end user is a healthcare worker then you must use this access mode. + If the end user is a healthcare worker then you must use this access mode. All API endpoints that support this + access mode require that the user has been authenticated with a "very high confidence" authenticator ([AAL3](https://digital.nhs.uk/services/care-identity-service/applications-and-services/cis2-authentication/integrate/design-and-build/authenticator-guidance-for-developers)). [Review all CIS2 healthcare worker access modes](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation#healthcare-worker-access-mode) ### Application-restricted access - This API is application-restricted, meaning we authenticate the calling application but not the end user. + This API is application-restricted, meaning we authenticate the calling application but not the end user. This + should only be utilised where user-restrcited access modes are not feasible or practical. [Review all application-restricted access modes](https://digital.nhs.uk/developer/guides-and-documentation/security-and-authorisation#application-restricted-apis) @@ -114,7 +122,7 @@ info: * 400 to 499 if it failed because of a client error by your application * 500 to 599 if it failed because of an error on our server - Errors specific to each API are shown in the Endpoints section, under Response. See our [reference guide](https://digital.nhs.uk/developer/guides-and-documentation/reference-guide#http-status-codes) for more on errors. + Errors specific to each API are shown in the Operations section. See our [reference guide](https://digital.nhs.uk/developer/guides-and-documentation/reference-guide#http-status-codes) for more information on errors. ## Open source You might find the following [open source](https://digital.nhs.uk/developer/guides-and-documentation/reference-guide#open-source) resources useful: @@ -125,7 +133,7 @@ info: | FHIR libraries and SDKs | Various open source libraries for integrating with FHIR APIs. | [FHIR libraries and SDKs](https://digital.nhs.uk/developer/guides-and-documentation/api-technologies-at-nhs-digital#fhir-libraries-and-sdks) | | nhs-number | Python package containing utilities for NHS numbers including validity checks, normalisation and generation. | [GitHub repo](https://github.com/uk-fci/nhs-number) \| [Python Package index](https://pypi.org/project/nhs-number/) \| [Docs](https://nhs-number.uk-fci.tech/) | - We currently don't have any open source client libraries or sample code for this API and the source code for the PDS FHIR back end (the Core Spine source code) is not currently in the open. If you think this would be useful, [contact us](https://digital.nhs.uk/developer/help-and-support). + We currently don't have any open source client libraries or sample code for this API and the source code for the Validated Relationship Service FHIR application is not currently in the open. If you think this would be useful, [contact us](https://digital.nhs.uk/developer/help-and-support). ## Environments and testing | Environment | Base URL | @@ -147,7 +155,7 @@ info: Our [integration test environment](https://digital.nhs.uk/developer/guides-and-documentation/testing#integration-testing) * is for formal integration testing - * includes authorisation with NHS Login + * requires authorisation using a supported access mode [Run In Postman](https://app.getpostman.com/run-collection/50544839-b6783b4e-de59-42c6-a80e-72cf64fa5ec9?action=collection%2Ffork&source=rip_markdown&collection-url=entityId%3D50544839-b6783b4e-de59-42c6-a80e-72cf64fa5ec9%26entityType%3Dcollection%26workspaceId%3D082e43b8-9a51-4a16-af66-0d2b233cd69c#?env%5BINT%5D=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) ## Onboarding @@ -184,26 +192,29 @@ paths: For any new access request, the necessary details should be collected from a user facing service e.g. Proxy Access Service and submitted as a QuestionnaireResponse. - For the most part demographics information doesn't need to be provided in the access request since it can be pulled from PDS. - ## Access modes This endpoint supports the following access modes: + - Patient access - ## Sandbox test scenarios + ## Sandbox test scenarios: - | Scenario | Request | Response | - | ---------------------- | ------------------------------------------------------------------------------------------- | ----------------------------------------------------------- | - | Successful request | Valid request with performer identifier value of `9000000009` or `9000000017` | HTTP Status 200 Success response | - | Duplicate relationship | Request for relationship that already exists, with performer identifier value of `9000000049` | HTTP Status 409 and DUPLICATE_RELATIONSHIP error response | + You can test the following scenarios in our sandbox environment: + + | Scenario | Request | Response | + | ---------------------- | ------------------------------------------------------------------------------------------- | -----------------------------------------------| + | Successful request | Valid request with performer identifier value of `9000000009` or `9000000017` | HTTP Status 200 Success response | + | Duplicate proxy role | Request for proxy role that already exists, with performer identifier value of `9000000049` | HTTP Status 409 and DUPLICATE error response | ### Sandbox constraints - - Questionnaire Response is not validated. - - Headers are not tested. `X-Request-ID` and `X-Correlation-ID` are disregarded. - Or perhaps you'd like to try out the sandbox using our 'Try it out' feature. + The sandbox environment has the following constraints for this endpoint: + + - QuestionnaireResponse is not validated. + - Request headers are not tested. `X-Request-ID` and `X-Correlation-ID` are disregarded. + - No access request is created. operationId: new-access-request parameters: @@ -211,7 +222,6 @@ paths: - $ref: "#/components/parameters/RequestID" - $ref: "#/components/parameters/CorrelationID" requestBody: - description: FHIR QuestionnaireResponse required: true content: application/fhir+json: @@ -249,7 +259,7 @@ paths: location: schema: type: string - example: https://sandbox.api.service.nhs.uk/validated-relationships/FHIR/R4/QuestionnaireResponse?ID=156e1560-e532-4e2a-85ad-5aeff03dc43e + example: https://sandbox.api.service.nhs.uk/validated-relationships/FHIR/R4/QuestionnaireResponse/156e1560-e532-4e2a-85ad-5aeff03dc43e description: URL for the newly created access request content: application/fhir+json: @@ -310,8 +320,7 @@ paths: QuestionnaireResponse document that was previously submitted. ## Request Requirements - A valid access request ID must be provided as a path parameter. This access request ID is returned - when a QuestionnaireResponse is initially submitted via the POST endpoint. + A valid access request ID must be provided as a path parameter. ## Access modes @@ -322,6 +331,8 @@ paths: ## Sandbox test scenarios + You can test the following scenarios in our sandbox environment: + | Scenario | Request | Response | | -------------------------------- | ------------------------------------------------ | ------------------------------------------------------------- | | Valid access request ID | ID value: `156e1560-e532-4e2a-85ad-5aeff03dc43e` | HTTP Status 200 with QuestionnaireResponse | @@ -329,6 +340,12 @@ paths: | Missing access request ID | No ID path parameter | HTTP Status 405 with METHOD_NOT_ALLOWED message | | Non-existent access request ID | ID value: `60d09b82-f4bb-41f9-b41e-767999b4ac9b` | HTTP Status 404 with QUESTIONNAIRE_RESPONSE_NOT_FOUND message | + ### Sandbox constraints + + The sandbox environment has the following constraints for this endpoint: + + - Request headers are not tested. For example, `X-Request-ID` and `X-Correlation-ID` are disregarded. + operationId: get-questionnaire-response parameters: - $ref: "#/components/parameters/BearerAuthorization" @@ -390,19 +407,23 @@ paths: examples: internalServerError: $ref: "./examples/responses/errors/internal-server-error.yaml#/InternalServerError" - downstreamServiceError: - $ref: "./examples/responses/errors/downstream-service-error.yaml#/DownstreamServiceError" /RelatedPerson: get: summary: Get verified candidate relationships description: | ## Overview - Use this endpoint to get candidate proxy relationships for a user with a given NHS Number. This endpoint should NOT be used to retrieve proxy relationships; these should be queried from the `/Consent` endpoint. + Use this endpoint to get verified relationship information for a user with a given NHS Number. This endpoint should NOT be used to retrieve established proxy roles; these should be queried from the GET /Consent endpoints. - You can (optionally) include `patient:identifier={nhsNumber}` request parameter with the patient's NHS number to get a specific verified relationship for the proxy. + You can query for RelatedPerson's in the following ways: - You can (optionally) include the `_include=RelatedPerson:patient` request parameter to include the patient's details in the response. + | Outcome | Query string value | + | ----------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | + | Search for patient relationships for a candidate proxy | `identifier={proxy identifier}` | + | Search for candidate proxy relationships for a patient | `patient:identifier={patient identifier}` | + | Search for a specific verified candidate relationship for a given proxy and patient | `identifier={proxy identifier}&patient:identifier={patient identifier}` | + + You must provide either the `identifier={identifier}` or `patient:identifier={identifier}` query string, or both, in your request. ## Access modes @@ -412,27 +433,26 @@ paths: ## Sandbox test scenarios - | Scenario | Request | Response | - | --------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------- | - | List Relationship | `identifier=9000000017` | HTTP Status 200 List of relationships for the proxy | - | List Relationship and include patient's details | `identifier=9000000017&_include=RelatedPerson:patient` | HTTP Status 200 List of relationships for the proxy and includes patient data | - | List Patient Relationship | `patient:identifier=9000000042` | HTTP Status 200 List of relationships for the patient | - | List Patient Relationship and include patient's details | `patient:identifier=9000000042&_include=RelatedPerson:patient` | HTTP Status 200 List of relationships for the patient and includes proxy data | - | List Relationship and no relationships returned | `identifier=9000000033` | HTTP Status 200 Empty bundle | - | Verify Relationship between proxy and patient | `identifier=9000000017&patient:identifier=9000000009` | HTTP Status 200 Verified relationship between patient and proxy | - | Verify Relationship between proxy and patient and include patient's details | `identifier=9000000017&patient:identifier=9000000009&_include=RelatedPerson:patient` | HTTP Status 200 Verified relationship between patient and proxy and includes patient's details | - | Verify Relationship between proxy and patient | `identifier=9000000017&patient:identifier=9000000025` | HTTP Status 200 Verified relationship between patient and proxy | - | Verify Relationship between proxy and patient and include patient's details | `identifier=9000000017&patient:identifier=9000000025&_include=RelatedPerson:patient` | HTTP Status 200 Verified relationship between patient and proxy and includes patient's details | - | Missing identifier | `patient:identifier=9000000009` | HTTP Status 400 and MISSING_IDENTIFIER_VALUE error response | + You can test the following scenarios in our sandbox environment: + + | Scenario | Request | Response | + | --------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- | + | List Relationship | `identifier=9000000017` | HTTP Status 200 List of relationships for the proxy | + | List Relationship and include patient's details | `identifier=9000000017&_include=RelatedPerson:patient` | HTTP Status 200 List of relationships for the proxy and includes patient data | + | List Patient Relationship | `patient:identifier=9000000042` | HTTP Status 200 List of relationships for the patient | + | List Patient Relationship and include patient's details | `patient:identifier=9000000042&_include=RelatedPerson:patient` | HTTP Status 200 List of relationships for the patient and includes proxy data | + | List Relationship and no relationships returned | `identifier=9000000033` | HTTP Status 200 Empty bundle | + | Verify Relationship between proxy and patient | `identifier=9000000017&patient:identifier=9000000009` | HTTP Status 200 Verified relationship between patient and proxy | + | Verify Relationship between proxy and patient and include patient's details | `identifier=9000000017&patient:identifier=9000000009&_include=RelatedPerson:patient` | HTTP Status 200 Verified relationship between patient and proxy and includes patient's details | + | Missing identifier | `` | HTTP Status 400 and MISSING_IDENTIFIER_VALUE error response | | Invalid identifier | `identifier=900000000` Note: This identifier is 9 characters long, too short to be NHS Number | HTTP Status 400 and INVALID_IDENTIFIER_VALUE error response | - | Invalid identifier system | `identifier=https://fhir.nhs.uk/Id/nhs-number/9730675929` | HTTP Status 400 and INVALID_IDENTIFIER_SYSTEM error response | - | Identifier not supported in sandbox | `identifier=1000000001` | HTTP Status 404 and INVALIDATED_RESOURCE error response | + | Malformed identifier & system | `identifier=https://fhir.nhs.uk/Id/nhs-number/9730675929` | HTTP Status 400 and INVALID_IDENTIFIER_SYSTEM error response | ### Sandbox constraints - - Headers are not tested. `X-Request-ID` and `X-Correlation-ID` are disregarded. - - `patient:identifier` is not validated. - Or perhaps you'd like to try out the sandbox using our 'Try it out' feature. + The sandbox environment has the following constraints for this endpoint: + + - Request headers are not tested. For example, `X-Request-ID` and `X-Correlation-ID` are disregarded. operationId: get-validated-relationships parameters: @@ -531,7 +551,7 @@ paths: Either `performer:identifier` or `patient:identifier` request parameters must be provided. `performer:identifier` and `patient:identifier` can be used together. - You can (optionally) include `status={status}` request parameter to filter the limit the response to records with a given status bound to the http://hl7.org/fhir/consent-state-codes CodeSystem e.g. `status=active`. + You can (optionally) include a `status={status}` query string parameter to filter the response to records with a given status bound to the http://hl7.org/fhir/consent-state-codes CodeSystem e.g. `status=active` or `status=proposed,active`. You can (optionally) include the `_include=Consent:performer` request parameter to include the proxy's details in the response. @@ -546,6 +566,8 @@ paths: ## Sandbox test scenarios + You can test the following scenarios in our sandbox environment: + | Scenario | Request | Response | | --------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------- | | Multiple proxy relationships filtered by 'active' status including details | `performer:identifier=9000000017&_include=Consent:patient&_include=Consent:performer&status=active` | HTTP Status 200 Bundle containing a multiple active proxy relationships including performer and patient details | @@ -574,7 +596,10 @@ paths: | GP Practice not found | `identifier=9000000012` | HTTP Status 404 and GP_PRACTICE_NOT_FOUND error response | ### Sandbox constraints - - Headers are not tested. `X-IM1-Connection-Params`, `X-Request-ID` and `X-Correlation-ID` are disregarded. + + The sandbox environment has the following constraints for this endpoint: + + - Request headers are not tested. `X-IM1-Connection-Params`, `X-Request-ID` and `X-Correlation-ID` are disregarded. operationId: get-consent parameters: @@ -695,9 +720,8 @@ paths: ## Sandbox test scenarios - The sandbox supports a limited number of scenarios, and does not attempt to validate requests. The returned result is dependant on the `performer.identifier.value`. + You can test the following scenarios in our sandbox environment: - See the postman collection for an example request body. | Scenario | Request | Response | | --------------------------------------- | ----------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------- | | Successful parent-child proxy creation | Valid request with a legal basis of parental responsibility, with performer identifier value of `9000000009`| HTTP Status 201 and OperationOutcome response | @@ -712,6 +736,15 @@ paths: | Invalid grantor identifier system | Request with grantor extension but wrong/missing identifier system, performer identifier `9000000056` | HTTP Status 422 and INVALID_GRANTOR_SYSTEM error response | | Duplicate relationship | Request for relationship that already exists, with performer identifier value of `9000000049` | HTTP Status 409 and DUPLICATE_RELATIONSHIP error response | + ### Sandbox constraints + + The sandbox environment has the following constraints for this endpoint: + + - `patient.identifier.value` is disregarded. The returned response is based on the `performer.identifier.value` only. + - Request body is not validated. + - Request headers are not tested. `X-Request-ID` and `X-Correlation-ID` are disregarded. + - No proxy role is created. + operationId: create-proxy-role parameters: - $ref: "#/components/parameters/BearerAuthorization" @@ -853,9 +886,8 @@ paths: ## Sandbox test scenarios - The sandbox supports a limited number of scenarios, and does not attempt to validate requests. The returned result is dependant on the `ID` for the consent resource. + You can test the following scenarios in our sandbox environment: - See the postman collection for an example request body. | Scenario | Request | Response | | -------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | | Retrieve single consenting adult relationship | Valid request with ID `74eed847-ca25-4e76-8cf2-f2c2d7842a7a` | HTTP Status 200 Bundle containing a single active proxy relationship | @@ -867,6 +899,12 @@ paths: | Retrieve single mother-child relationship with performer details | Valid request with ID `39df03a2-1b14-4d19-b1dc-d5d8cbf96948?_include=Consent:performer` | HTTP Status 200 Bundle containing a single active proxy relationship with performer details | | Retrieve single mother-child relationship with performer and patient details | Valid request with ID `39df03a2-1b14-4d19-b1dc-d5d8cbf96948?_include=Consent:performer&_include=Consent:patient` | HTTP Status 200 Bundle containing a single active proxy relationship with performer details and patient details | + ### Sandbox constraints + + The sandbox environment has the following constraints for this endpoint: + + - Request headers are not tested. `X-Request-ID` and `X-Correlation-ID` are disregarded. + operationId: get-consent-by-id parameters: - $ref: "#/components/parameters/BearerAuthorization" @@ -938,7 +976,6 @@ paths: | ----------- | -------------------------- | ------------------------------------------------------------- | | 500 | `SERVER_ERROR` | An unexpected internal server error has occurred. | | 502 | `BAD_GATEWAY` | Connection to the backend service failed. | - | 503 | `DOWNSTREAM_SERVICE_ERROR` | A downstream service has failed, request cannot be completed. | content: application/fhir+json: @@ -955,20 +992,22 @@ paths: ## Overview Use this endpoint to update an existing proxy role. - Common update scenarios include: - * Revocation of the role (status change from "active" to "inactive") - * Changing the legal basis of the role (TBC) - * Updating the end date for time-bound access + Supported update scenarios include: + + * Update the status and status reason, (optionally) providing an additional free text description + * Update the legal basis + * Update the end date, for time-bound access ## Request Requirements - * The proxy role must exist and be identified by a valid identifier + * The proxy role must exist and be identified by a valid ID * JSON Patch operations must be valid according to RFC 6902 * Status changes must use valid status codes from - **IMPORTANT: Business Rule Enforcement** - If you update the `/status` of a role, you **MUST** also provide a corresponding update to the `/extension` path in the same patch array to provide the `statusReason`. + ### IMPORTANT: Business Rule Enforcement for `/status` updates - Requests that change status without providing a status reason will return an error + If you update the `/status` of a role, you **MUST** also provide a corresponding update to the `/extension` path in the same patch array to provide the `statusReason`. An error will be returned if a request for a change of `/status` does not include a status reason. + + The values for `/status` and `statusReason` are validated against a proxy role lifecycle to ensure that the transition between the existing and requested status is valid. An error will be returned if the requested transition is not valid. ## Access modes @@ -978,11 +1017,8 @@ paths: - Application-restricted access ## Sandbox test scenarios - The sandbox supports a limited number of scenarios, and does not attempt to validate requests. The returned response is dependant on the `id` parameters. - - No changes are applied to any records. - See the postman collection for example requests. + You can test the following scenarios in our sandbox environment: | Scenario | Request | Response | | ------------------------------- | ----------------------------------------------------------------------------------------------- | ------------------------------------------------------------- | @@ -1000,6 +1036,15 @@ paths: | Invalid state transition | Patch attempting invalid status change, request with id '7b7f47b8-96e5-43eb-b733-283bf1449f2c' | HTTP Status 422 and INVALID_STATE_TRANSITION error response | | Missing free text for OTHER reason code | Patch with reason code 'OTHER' but missing free text, id='d4e8a6f2-1c3b-4a7e-9d2f-8b5c7e9f1a3d' | HTTP Status 400 and MISSING_FREE_TEXT_FOR_OTHER error response | | Missing grantor when activating status | Patch attempting to set status to 'active' without grantor extension, id='90957744-b971-496e-b7c3-ab971868ce14' | HTTP Status 400 and MISSING_GRANTOR_FOR_ACTIVE error response | + + ### Sandbox constraints + + The sandbox environment has the following constraints for this endpoint: + + - Request body is not validated. + - Request headers are not tested. + - No proxy role is updated. + parameters: - $ref: "#/components/parameters/ConsentID" requestBody: @@ -1016,27 +1061,7 @@ paths: updateProvisionEndDate: $ref: "./examples/requests/PATCH_Consent/replace_provision_end_date.yaml#/UpdateProvisionEndDate" multipleUpdates: - summary: Set status to active with an end date - description: | - Example of a combined update to a record. - The status will be changed to active. - The relationship will be considered as ended following this date. - value: - - op: replace - path: /status - value: active - - op: add - path: /extension/- - value: - - url: https://fhir.nhs.uk/England/StructureDefinition/Extension-England-Consent-Status-Reason - valueCodeableConcept: - coding: - - system: http://terminology.hl7.org/CodeSystem/consent-reason - code: "ROLE_ACTIVATED" - display: "Role activated" - - op: add - path: /provision/period/end - value: "2026-12-31T23:59:59Z" + $ref: "./examples/requests/PATCH_Consent/multiple_updates.yaml#/MultipleUpdates" regulatoryBasis: $ref: "./examples/requests/PATCH_Consent/replace_regulatory_basis.yaml#/ReplaceRegulatoryBasisRequest" responses: @@ -1103,7 +1128,6 @@ paths: | ----------- | -------------------------- | ------------------------------------------------------------- | | 500 | `SERVER_ERROR` | An unexpected internal server error has occurred. | | 502 | `BAD_GATEWAY` | Connection to the backend service failed. | - | 503 | `DOWNSTREAM_SERVICE_ERROR` | A downstream service has failed, request cannot be completed. | content: application/fhir+json: @@ -2124,7 +2148,7 @@ components: type: string description: The canonical URL of the resource in the entry resource: - $ref: "#/components/schemas/Consent" + $ref: "#/components/schemas/ReadConsent" search: type: object properties: @@ -2233,7 +2257,14 @@ components: type: string description: Unique identifier of the Patient resource meta: - $ref: "#/components/schemas/Meta" + type: object + description: Metadata about a resource + properties: + security: + type: array + description: Security Labels applied to this resource + items: + $ref: "#/components/schemas/Coding" identifier: type: array description: The primary identifier of a patient. Possible identifiers include the NHS number or local GP patient identifier. If it is an NHS number, it will always 10 digits and must be a [valid NHS number](https://www.datadictionary.nhs.uk/attributes/nhs_number.html). @@ -2283,7 +2314,7 @@ components: description: Unique identifier of the Consent resource status: type: string - description: "The status of the consent, following the ConsentStateCodes value set." + description: "The status of the consent, following the ConsentStateCodes value set. See more information about this codesystem in the [FHIR specification](http://hl7.org/fhir/R4/codesystem-consent-state-codes.html)." enum: - draft - proposed @@ -2329,6 +2360,20 @@ components: - $ref: "#/components/schemas/GrantorExtension" description: "Additional content. For active proxy roles, grantor is required." + ReadConsent: + allOf: # Extends the Consent model + - $ref: "#/components/schemas/Consent" + - type: object + properties: + meta: + type: object + description: "Metadata about a resource" + properties: + lastUpdated: + type: string + format: date-time + description: "When the resource version last changed" + Policy: type: object properties: @@ -2353,7 +2398,7 @@ components: - deny period: type: object - description: "Timeframe for this provision." + description: "The start date on which the proxy role was granted, and (optionally) an end date for time-bound access." properties: start: type: string @@ -2534,16 +2579,6 @@ components: type: string description: "The value that is unique." - Meta: - type: object - description: Metadata about a resource - properties: - security: - type: array - description: Security Labels applied a resource - items: - $ref: "#/components/schemas/Coding" - CodeableConcept: type: object properties: