Electronic Health Record Access Control 7 Document Request Authorization Decisions Security Labeling Service (SLS) External Authority Document Orchestration 5 4 Decomposed Clinical Document (CLINICAL FACTS) Mapped Clinical Facts Label Rules Generation Rules Engine Raw CDA Document Authorization Obligations Security Risk Assessment / Policy 8 2 Labeling Rules 3 Transform Template(s) Transform Actions Redact, Annotate, Mask(Encrypt) Annotated (classified) Document SNOMED-CT RxNORM ICD LOINC HL7 Vocabularies Patient Restrictions Jurisdictional Policy Organizational Policy HL7 Security and Privacy Vocabulary -OR- Document Packaging (Encrypt) Annotated (classified) Composite Documents Clinical Administration -------------------- Clinician Clinical Fact-AKA Clinical object, e.g., observation, medication, procedure, lab results etc. Clinical Administration: Clinical Facts are captured into EHR with standard information attributes according to documentation rules, guidelines in Organizational and Jurisdictional Policies by properly knowledgeable health care professionals Security/Privacy Administration: Patient restrictions are captured into EHR as part of the formal record Security/Privacy Administration --------------------------------- Privacy Office Release of Information Office Business Stakeholder Security Administration 6 1 Clinical Facts extracted from source documentation Clinical Facts mapped to EHR objects e.g., Lab Report{HIV…} Label Rules created based on Risk Assessment Label Rules installed in SLS Rules Engine Clinical Facts extracted from source document SLS applies labeling rules and document transforms Authorization Decision made based on Security Label Package forwarded for delivery