Overview

This specification is for the MV FHIR AuditEvent API. FHIR (Fast Healthcare Interoperability Resources (http://hl7.org/fhir) is a standard for health care data exchange, and uses "Resources" which are like models which can be used for transferring data. Profiles can be built on top of the model to specify exactly which fields should be used and how.

Our solution supports two profiles (a generic profile and a HSO profile).

The Generic solution profiles the following base FHIR R4 resource:

The HSO solution profiles the following base FHIR R4 resources:

The AuditEvent resource is used to retrieve logged access entries to specific patients by specific practitioners, interfaces/APIs, (or potentially even the patients themselves.)

Additional resources are not part of this solution, but may be supported in other APIs.

Supported HTTP Verbs

GET can be performed to get all or specific AuditEvent entries. The results are returned in a bundle, with some operation outcomes whenever there is a warning or error which needs additional explanation.

JSON Only

Although in FHIR, resources are represented as either XML or JSON, this solution currently only supports returning responses in JSON.