This page is part of the CH ATC (R4) (v3.3.0: Draft Draft) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Home

Official URL: http://fhir.ch/ig/ch-atc/ImplementationGuide/ch.fhir.ig.ch-atc				Version: 3.3.0
Active as of 2024-12-18				Computable Name: CH_ATC
Copyright/Legal: CC0-1.0

Introduction

Patients and their representatives have access to the audit trail of the Electronic Patient Record (EPR) via the portal of their reference community. The Swiss profile Audit Trail Consumption (CH ATC) defines the Audit Messages for document management, access policy management, audit trail retrieval by the patient or their representative(s), and logging of group entries of healthcare professionals. This profile uses the IHE transaction Retrieve ATNA Audit Event [ITI-81] to consume the Audit Messages from all communities. CH ATC is intended for patients to see what has happened in their EPR. It does not replace the logging of the ATNA Audit Events. This profile fulfills the Swiss regulations and is referenced in Annex 5 of the EPRO-FDHA.
This implementation guide is built with IG Publisher from HL7. For more information about the EPR, see patientrecord.ch, e-health-suisse.ch and Federal Office of Public Health.

Implementation Guide Structure

This implementation guide is organized into this main sections:

• Volume 1 - Integration Profiles
  • Overview
  • Actors, Transactions and Content Modules
  • Integration Profile Options
  • Actor Groupings
  • Overview - Use Cases
  • Security Considerations
• Volume 2 - Transactions
  • Constraints on Retrieve ATNA Audit Event [ITI-81]
• Volume 3 - Content Profiles
  • Audit Trail Consumption Event Types
  • Document Audit Event Content Profile
  • Policy Audit Event Content Profile
  • Access Audit Trail Content Profile
  • HPD Group Entry Audit Event Content Profile

Conformance Expectations

The key words must, must not, required, shall, shall not, should, should not, recommended, may, and optional in this document are to be interpreted as described in RFC2119.

Scope of Precisions

The extensions, restrictions and translations specified apply to the following IHE IT Infrastructure (ITI) integration profiles:

• Technical Framework
  • Volume 1, Revision 19.0, June 17, 2022 - Final Text
  • Volume 2, Revision 19.0, June 17, 2022 - Final Text
  • Volume 3, Revision 19.0, June 17, 2022 - Final Text
• Technical Framework Supplements
  • Add RESTful ATNA (Query and Feed), Revision 3.3, July 2, 2021
  • Internet User Authorization (IUA), Revision 2.2, June 17, 2022

Download and Analysis

You can download this implementation guide in npm format from here.

IP Statements

This publication includes IP covered under the following statements.

• CC0-1.0
  Show Usage
  • ch-ehealth-codesystem-agentRole: AccessAuditTrailEvent, AuditEvent/atc-doc-read-ass-hpc... Show 5 more, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, DocumentAuditEvent, EprParticipant and PolicyAuditEvent
  • ch-ehealth-codesystem-purposeOfUse: AuditEvent/atc-doc-create-rep-pat, AuditEvent/atc-doc-read-ass-hpc, AuditEvent/atc-doc-search, Bundle/ch-atc-iti-81-response-sample and DocumentAuditEvent
  • ch-ehealth-codesystem-role: AccessAuditTrailEvent, AuditEvent/atc-doc-create-rep-pat... Show 10 more, AuditEvent/atc-doc-read-ass-hpc, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, AuditEvent/atc-log-read, AuditEvent/atc-pol-create-acc-right, AuditEvent/atc-pol-create-rep, Bundle/ch-atc-iti-81-response-sample, DocumentAuditEvent, EprParticipant and PolicyAuditEvent
  • ch-ehealth-codesystem-atc: AccessAuditTrailEvent, AccessAuditTrailEventType... Show 14 more, AuditEvent/atc-doc-create-rep-pat, AuditEvent/atc-doc-read-ass-hpc, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, AuditEvent/atc-log-read, AuditEvent/atc-pol-create-acc-right, AuditEvent/atc-pol-create-rep, Bundle/ch-atc-iti-81-response-sample, DocumentAuditEvent, DocumentAuditEventType, HpdAuditEvent, HpdAuditEventType, PolicyAuditEvent and PolicyAuditEventType
• ISO Maintains the copyright on the country codes, and controls it's use carefully. For futher details see the ISO 3166 web page: https://www.iso.org/iso-3166-country-codes.html
  Show Usage
  • ISO 3166-1 Codes for the representation of names of countries and their subdivisions — Part 1: Country code: AccessAuditTrailEvent, AccessAuditTrailEventType... Show 12 more, CH_ATC, CapabilityStatement/PatientAuditRecordRepositoryCapabilityStatement, ChAtcIti81Response, DocumentAuditEvent, DocumentAuditEventType, EprParticipant, HpdAuditEvent, HpdAuditEventType, PolicyAuditEvent, PolicyAuditEventType, SPEntityIdentifier and UniqueidIdentifier
• These codes are excerpted from Digital Imaging and Communications in Medicine (DICOM) Standard, Part 16: Content Mapping Resource, Copyright © 2011 by the National Electrical Manufacturers Association.
  Show Usage
  • DICOM Controlled Terminology Definitions: AccessAuditTrailEvent, AuditEvent/atc-doc-create-rep-pat... Show 10 more, AuditEvent/atc-doc-read-ass-hpc, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, AuditEvent/atc-log-read, AuditEvent/atc-pol-create-acc-right, AuditEvent/atc-pol-create-rep, Bundle/ch-atc-iti-81-response-sample, DocumentAuditEvent, HpdAuditEvent and PolicyAuditEvent
  • Audit Event ID: AccessAuditTrailEvent, DocumentAuditEvent, HpdAuditEvent and PolicyAuditEvent
• These codes are excerpted from ISO Standard, TS 21089-2017 - Health Informatics - Trusted End-to-End Information Flows, Copyright by ISO International. Copies of this standard are available through the ISO Web Site at www.iso.org.
  Show Usage
  • ISO 21089 2017 Health Record Lifecycle Events: AccessAuditTrailEvent, DocumentAuditEvent, HpdAuditEvent and PolicyAuditEvent
• This material derives from the HL7 Terminology (THO). THO is copyright ©1989+ Health Level Seven International and is made available under the CC0 designation. For more licensing information see: https://terminology.hl7.org/license.html
  Show Usage
  • Audit event entity type: AuditEvent/atc-doc-create-rep-pat, AuditEvent/atc-doc-read-ass-hpc... Show 6 more, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, AuditEvent/atc-log-read, AuditEvent/atc-pol-create-acc-right, AuditEvent/atc-pol-create-rep and Bundle/ch-atc-iti-81-response-sample
  • AuditEventEntityRole: AuditEvent/atc-doc-create-rep-pat, AuditEvent/atc-doc-read-ass-hpc... Show 6 more, AuditEvent/atc-doc-search, AuditEvent/atc-hpd-group-entry-notify, AuditEvent/atc-log-read, AuditEvent/atc-pol-create-acc-right, AuditEvent/atc-pol-create-rep and Bundle/ch-atc-iti-81-response-sample

Cross Version Analysis

This is an R4 IG. None of the features it uses are changed in R4B, so it can be used as is with R4B systems. Packages for both R4 (ch.fhir.ig.ch-atc.r4) and R4B (ch.fhir.ig.ch-atc.r4b) are available.

Dependency Table

Package hl7.fhir.uv.extensions.r4#5.1.0 This IG defines the global extensions - the ones defined for everyone. These extensions are always in scope wherever FHIR is being used (built Sat, Apr 27, 2024 18:39+1000+10:00)

Package ihe.formatcode.fhir#1.3.0 Implementation Guide for IHE defined FormatCode vocabulary. (built Fri, May 17, 2024 12:02-0500-05:00)

Package ch.fhir.ig.ch-term#3.1.0 Implementation Guide for Swiss Terminology (built Tue, Dec 17, 2024 13:13+0000+00:00)

Package ch.fhir.ig.ch-core#5.0.0 FHIR implementation guide CH Core (built Tue, Dec 17, 2024 19:54+0000+00:00)

Package hl7.fhir.uv.extensions.r4#1.0.0 This IG defines the global extensions - the ones defined for everyone. These extensions are always in scope wherever FHIR is being used (built Sun, Mar 26, 2023 08:46+1100+11:00)

Package ihe.iti.pixm#3.0.4 ImplementationGuide for IHE IT Infrastructure Technical Framework Supplement Patient Identifier Cross-referencing for mobile (PIXm) (built Thu, Feb 22, 2024 13:07-0600-06:00)

Package ihe.iti.pdqm#3.0.0 The Patient Demographics Query for Mobile (PDQm) Profile defines a lightweight RESTful interface to a patient demographics supplier leveraging technologies readily available to mobile applications and lightweight browser based applications. (built Fri, Feb 23, 2024 14:36-0600-06:00)

Package ihe.iti.mhd#4.2.2 ImplementationGuide for IHE IT Infrastructure Technical Framework Supplement Mobile access to Health Documents (MHD) (built Sat, May 18, 2024 12:30-0500-05:00)

Package ihe.iti.balp#1.1.0 The Basic Audit Log Patterns (BALP) Implementation Guide is a Content Profile that defines some basic and reusable AuditEvent patterns. This includes basic audit log profiles for FHIR RESTful operations to be used when there is not a more specific audit event defined. A focus is enabling Privacy centric AuditEvent logs that hold well formed indication of the Patient when they are the subject of the activity being recorded in the log. Where a more specific audit event can be defined it should be derived off of these basic patterns. (built Wed, May 4, 2022 10:07-0500-05:00)

Package ihe.iti.mcsd#3.8.0 The IHE Mobile Care Services Discovery (mCSD) IG provides a transaction for mobile and lightweight browser-based applications to find and update care services resources. (built Fri, Aug 12, 2022 09:41-0500-05:00)

Package ihe.iti.balp#1.1.3 The Basic Audit Log Patterns (BALP) Implementation Guide is a Content Profile that defines some basic and reusable AuditEvent patterns. This includes basic audit log profiles for FHIR RESTful operations to be used when there is not a more specific audit event defined. A focus is enabling Privacy centric AuditEvent logs that hold well formed indication of the Patient when they are the subject of the activity being recorded in the log. Where a more specific audit event can be defined it should be derived off of these basic patterns. (built Wed, Feb 14, 2024 15:23-0600-06:00)

Package ch.fhir.ig.ch-epr-fhir#4.0.1 Implementation Guide for the Mobile access to Health Documents (EPR FHIR) Profile for the Swiss EPR (built Wed, Dec 18, 2024 12:07+0000+00:00)

Globals Table

There are no Global profiles defined