We have discussed in years past that Australia had a Privacy Consent where break-glass was not allowed. We understand that has changed to allow break-glass. Thus we didn't know of a case where a Consent forbid break-glass... I have been made aware of Utah HIE that has a checkbox on their Consent to forbid break-glass. This is a consent only for HIE, not for within a hospital environment; but it is relevant to our FHIR consent (and CDA consent) work. Thus I think it is useful for us to provide it as an example, and work through how it might be expressed.
The Utah HIE Consent Form is
Note, that in the context of a FHIR consent; this URL could be used as the Policy URI... It is a general form that the Patient has some check boxes they can choose.
So given that we have an example that forbids Treatment but allows Break-Glass (Note spell check needed) http://build.fhir.org/consent-example-Emergency.html
We should likely create an example that forbids both Treatment and Emergency (Break-Glass). Something like this:
<Consent xmlns="http://hl7.org/fhir"> <id value="consent-example-No-Emergency"/>I have filed a FHIR Change Request 13420
<p> Withhold Authorization for Treatment and for Emergency Treatment </p> <p>
Patient "P. van de Heuvel" wishes to have no data shared for Treatment or Emergency treatment use.
An overall consent Directive, with an exception
"Deny" of purposeOfUse "TREAT" sharing use and
"Deny" of purposeOfUse "ETREAT" sharing use
at "Infoway" HIE. </p>
<display value="P. van de Heuvel"/>
<!-- not bound by a timeframe - Consent.period -->
<!-- I assume the example given is Canada Infoway wide??? AND I assume it is desired to state that in the Consent.authority element -->
<display value="Canada Infoway"/>
<!-- the text terms of the consent in lawyer speak -->
<title value="The terms of the consent in lawyer speak."/>
<!-- likely use url pointer to common text -->
<!-- this is opt-out - e.g. nothing approved unless otherwise stated. -->
<!-- this policyRule is a multiple use policy. The Patient has expressed both deny Treatment and deny Emergency -->
Other Privacy Consent topics
Corrected the example to make more clear it is a "Privacy Consent" by specifying the Consent.category.