Security, privacy and audit requirements · C0916
What does a patient's consent record contain?
Designed, not yet built
Short answer
No. The specification describes it, but the pilot does not include it. REQ-4401 says consent must be captured per purpose, data category, recipient class, duration and revocability, with the rendered text hash signed by the patient or authorized representative. Its acceptance check: consent object contains all listed fields; signature verifies.
This is designed, not built.
- Specification item
- REQ-4401
- Specification priority
- P0 (of P0 to P3)
- Tiers
- Small, Medium, Large
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- When is consent checked, and what happens offline? Designed
- How does consent work for children, guardians, proxies and representatives? Designed
See it in context: Consent management · Search the help center · Ask a question