Contains all organizational policies which are evaluated on all requests. The organization denies the request if the subject is attempting to access a resource and is not a member of the allowed organizations. Evaluates the allowed-organizations (if available) against the subject's locality. 0 The organization denies the request if the subject is attempting to access the resource outside of the alloted time. Evaluates the environment time against the hours of operation start and end. The organization denies the request if the subject is attempting to access a resource and they are not a member of the required role(s). Evaluates the organization roles (if available) against the subject's role. 0 The organization denies the request if the subject does not have adequate permissions to access the resource. Evaluates the required permissions (if available) against the subject's permissions. 0 These policies are patient consent directives and are invoked on medical-record requests. Denies the request for problems from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-roles for problems (if available) against the subject's role. 0 Denies the request for medications from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-roles for medications (if available) against the subject's role. 0 Denies the request alerts from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-roles for alerts (if available) against the subject's role. 0 Denies the request for immunizations from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-roles for immunizations (if available) against the subject's role. 0 Denies the request for problems from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-subject-id's for problems (if available) against the subject's NPI. 0 Denies the request for medications from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-subject-id's for medications (if available) against the subject's NPI. 0 Denies the request for alerts from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-subject-id's for alerts (if available) against the subject's NPI. 0 Denies the request for immunizations from the subject if the NPI is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-subject-id's for immunizations (if available) against the subject's NPI. 0 Denies the request from the subject if their locality is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the allowed-organizations (if available) against the subject's locality. 0 Denies the request from the subject if their role is not permitted by the patient. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the dissenting-role (if available) against the subject's role. Denies the request from the subject if the NPI is not permitted by the patient. Evaluates the dissenting-subject-id (if available) against the subject's NPI. urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record 0 Denies the request from the subject if the confidentiality code is set to "Sensitive". This policy is acting as the "Catch-All". urn:oasis:names:tc:xspa:1.0:resource:hl7:type:medical-record Evaluates the HL7 confidentiality-code. S