Consent Management Service

Manages patient consent and authorization for treatment, data sharing, research participation, and privacy preferences

Service Privacy HIPAA

Overview

The Consent Management Service captures, maintains, and enforces patient consent and authorization preferences across the healthcare system.

  • General consent to treat
  • Procedure-specific consent
  • Surgical consent
  • Anesthesia consent
  • Blood transfusion consent

Privacy & Data Sharing

  • HIPAA authorization
  • Health Information Exchange (HIE) consent
  • Research participation
  • Marketing communications opt-in/opt-out
  • Third-party app access (SMART on FHIR)

Advanced Directives

  • Living will
  • Healthcare power of attorney
  • Do Not Resuscitate (DNR)
  • POLST (Physician Orders for Life-Sustaining Treatment)

Implements FHIR R4 Consent resource:

  • Patient consent status
  • Consent scope and category
  • Consent provision (permit/deny)
  • Purpose of use
  • Data class restrictions
  • Time period validity

Privacy Preferences

Sensitive Data Categories

  • Mental health
  • Substance abuse
  • HIV/AIDS
  • Genetic information
  • Reproductive health

Patients can restrict sharing of specific categories.

Technology Stack

  • Java, Spring Boot
  • PostgreSQL
  • FHIR Consent Resource
  • Digital signature capture
  • Document management integration
Edit this page