Security, privacy and audit requirements · C0919
Are substance-use, psychotherapy and reproductive-health records handled separately?
Designed, not yet built
Short answer
How would it be tested? The specification says part 2 record not disclosed without matching consent; redisclosure notice attached. That is the check for REQ-4404: consent for 42 CFR Part 2 records, psychotherapy notes and reproductive-health-sensitive data must be separate, purpose-specific and revocable. This is on the design side of the line. Nothing in v0.2.0 does it.
This is designed, not built.
- Specification item
- REQ-4404
- Specification priority
- P0 (of P0 to P3)
- Tiers
- Small, Medium, Large
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- How does consent work for children, guardians, proxies and representatives? Designed
- Does AuroraMed provide a consent dashboard showing active consents, recipients, last access and revocation? Designed
- Does the strict Latin America tier bundle consent together? Designed
- When is consent checked, and what happens offline? Designed
See it in context: Consent management · Search the help center · Ask a question