FHIR © HL7.org  |  Server Home  |  XIG Home  |  Server Source  |  FHIR  

FHIR IG Statistics: Requirements/EHRSFMR2-RI.1.1.16.1

Packagehl7.ehrs.uv.ehrsfmr2
TypeRequirements
IdEHRSFMR2-RI.1.1.16.1
FHIR VersionR5
Sourcehttp://hl7.org/ehrs/uv/ehrsfmr2/https://build.fhir.org/ig/mvdzel/ehrsfm-fhir-r5/Requirements-EHRSFMR2-RI.1.1.16.1.html
URLhttp://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-RI.1.1.16.1
Version2.1.1-ballot
Statusactive
Date2025-05-13T15:11:00+00:00
NameRI_1_1_16_1_Evidence_of_Record_Entry_Destruction_Event
TitleRI.1.1.16.1 Evidence of Record Entry Destruction Event (Function)
Realmuv
Authorityhl7
DescriptionMaintain Evidence of Record Entry Destruction Event
PurposeEvidence of Record Entry Destruction Event includes key metadata, ensures health record integrity (and trust) and enables record audit.

Resources that use this resource

No resources found


Resources that this resource uses

No resources found


Narrative

Note: links and images are rebased to the (stated) source

Statement N:

Maintain Evidence of Record Entry Destruction Event

Description I:

Evidence of Record Entry Destruction Event includes key metadata, ensures health record integrity (and trust) and enables record audit.

Actors:
ehr
Criteria N:
RI.1.1.16.1#01 dependent SHALL

The system SHALL audit each occurrence when Record Entry content is destroyed according to scope of practice, organizational policy, and/or jurisdictional law.

RI.1.1.16.1#02 SHALL

The system SHALL capture identity of the organization where Record Entry content is destroyed.

RI.1.1.16.1#03 SHALL

The system SHALL capture identity of the patient who is subject of destroyed Record Entry content.

RI.1.1.16.1#04 SHALL

The system SHALL capture a destruction identifier for destroyed Record Entry content (e.g., nursing home inpatient stay from 3/15/2000 thru 6/10/2000).

RI.1.1.16.1#05 SHALL

The system SHALL capture identity of the user destroying Record Entry content.

RI.1.1.16.1#06 SHALL

The system SHALL capture identity of the system application which destroyed Record Entry content.

RI.1.1.16.1#07 SHALL

The system SHALL capture the type of Record Event trigger (i.e., destroy).

RI.1.1.16.1#08 SHALL

The system SHALL capture the date and time Record Entry content is destroyed.

RI.1.1.16.1#09 SHOULD

The system SHOULD capture identity of the location (i.e., network address) where Record Entry content is destroyed.

RI.1.1.16.1#10 MAY

The system MAY capture the rationale for destroying Record Entry content.

RI.1.1.16.1#11 MAY

The system MAY capture the data, document or other identifier for destroyed Record Entry content.

RI.1.1.16.1#12 MAY

The system MAY capture data elements for Record Entry content de-identified.


Source

{
  "resourceType": "Requirements",
  "id": "EHRSFMR2-RI.1.1.16.1",
  "meta": {
    "profile": [
      "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/FMFunction"
    ]
  },
  "text": {
    "status": "extensions",
    "div": "<!-- snip (see above) -->"
  },
  "extension": [
    {
      "url": "http://hl7.org/fhir/StructureDefinition/structuredefinition-wg",
      "valueCode": "ehr"
    }
  ],
  "url": "http://hl7.org/ehrs/uv/ehrsfmr2/Requirements/EHRSFMR2-RI.1.1.16.1",
  "version": "2.1.1-ballot",
  "name": "RI_1_1_16_1_Evidence_of_Record_Entry_Destruction_Event",
  "title": "RI.1.1.16.1 Evidence of Record Entry Destruction Event (Function)",
  "status": "active",
  "date": "2025-05-13T15:11:00+00:00",
  "publisher": "HL7 International / Electronic Health Records",
  "contact": [
    {
      "telecom": [
        {
          "system": "url",
          "value": "http://www.hl7.org/Special/committees/ehr"
        }
      ]
    }
  ],
  "description": "Maintain Evidence of Record Entry Destruction Event",
  "jurisdiction": [
    {
      "coding": [
        {
          "system": "http://unstats.un.org/unsd/methods/m49/m49.htm",
          "code": "001",
          "display": "World"
        }
      ]
    }
  ],
  "purpose": "Evidence of Record Entry Destruction Event includes key metadata, ensures health record integrity (and trust) and enables record audit.",
  "statement": [
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": true
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-01",
      "label": "RI.1.1.16.1#01",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL audit each occurrence when Record Entry content is destroyed according to scope of practice, organizational policy, and/or jurisdictional law.",
      "derivedFrom": "EHR-LM_R1 14.10"
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-02",
      "label": "RI.1.1.16.1#02",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture identity of the organization where Record Entry content is destroyed."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-03",
      "label": "RI.1.1.16.1#03",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture identity of the patient who is subject of destroyed Record Entry content."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-04",
      "label": "RI.1.1.16.1#04",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture a destruction identifier for destroyed Record Entry content (e.g., nursing home inpatient stay from 3/15/2000 thru 6/10/2000)."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-05",
      "label": "RI.1.1.16.1#05",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture identity of the user destroying Record Entry content."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-06",
      "label": "RI.1.1.16.1#06",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture identity of the system application which destroyed Record Entry content."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-07",
      "label": "RI.1.1.16.1#07",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture the type of Record Event trigger (i.e., destroy)."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-08",
      "label": "RI.1.1.16.1#08",
      "conformance": [
        "SHALL"
      ],
      "conditionality": false,
      "requirement": "The system SHALL capture the date and time Record Entry content is destroyed."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-09",
      "label": "RI.1.1.16.1#09",
      "conformance": [
        "SHOULD"
      ],
      "conditionality": false,
      "requirement": "The system SHOULD capture identity of the location (i.e., network address) where Record Entry content is destroyed."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-10",
      "label": "RI.1.1.16.1#10",
      "conformance": [
        "MAY"
      ],
      "conditionality": false,
      "requirement": "The system MAY capture the rationale for destroying Record Entry content."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-11",
      "label": "RI.1.1.16.1#11",
      "conformance": [
        "MAY"
      ],
      "conditionality": false,
      "requirement": "The system MAY capture the data, document or other identifier for destroyed Record Entry content."
    },
    {
      "extension": [
        {
          "url": "http://hl7.org/ehrs/uv/ehrsfmr2/StructureDefinition/requirements-dependent",
          "valueBoolean": false
        }
      ],
      "key": "EHRSFMR2-RI.1.1.16.1-12",
      "label": "RI.1.1.16.1#12",
      "conformance": [
        "MAY"
      ],
      "conditionality": false,
      "requirement": "The system MAY capture data elements for Record Entry content de-identified."
    }
  ]
}