Health informatics — Principles and data requirements for consent in the collection, use or disclosure of personal health information

This specification defines the set of frameworks of consent for the collection, use and/or disclosure of personal information by healthcare practitioners or organisations that are frequently used to obtain agreement to process the personal health information of subjects of care. This is in order to provide an informational consent framework which can be specified and used by individual policy domains (for example, healthcare organisations, regional health authorities, jurisdictions and countries) as an aid to the consistent management of information in the delivery of healthcare services and the communication of electronic health records across organisational and jurisdictional boundaries.

Main sections:

· Scope

· Normative references

· Terms and definitions

· Abbreviated terms

· Consent requirements

· Consent frameworks

· Mechanisms and process: denial, opt-in and opt-out, and override

· Minimum data requirements

· Annex A: Consent framework diagrams

· Annex B: Jurisdictional implementation examples