Business Context > Business Rules
Business Rules
Data Query Business Rules
| ID | Description | Search Parameter/FHIR Field |
|---|---|---|
| 1 | All acCDR FHIR search queries must include patient identifier which can be an HCN, MRN or ECID (Enterprise Client ID) | search parameter must contain patient.identifier |
| 1.1 | Patient identifier search parameter must include both system and value | identifier.system and identifier.value must be present |
| 2 | The patient information provided in the query must be accurate according to the most recent Ontario health card number or MRN. | patient.identifier |
| 3 | The FHIR API shall support all of the optional search parameters as per current FHIR IG. | All parameters |
| 4 | Any parameters chosen in the filtering criteria should not have a blank value. | All parameters |
| 5 | The FHIR API shall support READ requests based on Encounter, Document, and AllergyIntolerance. | Encounter.id, Bundle.id, AllergyIntolerance.id |
| 6 | When search query does not have start date, all applicable data before the end date is in scope. When no end date is provided, all applicable data after the start date is in scope. The most recent or current document is in scope if neither a start date nor an end date is provided. | |
| 7 | When a date or datetime search parameter is present, it should provide values precise to the second + time offset | |
| 8 | If no acCDR data falls within the parameters of the request, the API must return appropriate notification in the query response. | OperationOutcome |
| 9 | All of the available acCDR data elements as per the current FHIR specification should be returned in response to the query. | |
| 10 | The FHIR API must validate the data in the query parameter against the Provincial Client Registry (PCR) and the Provincial Provider Registry (PPR). | |
| 11 | Where query is made against patient with active Consent Directive, the API must return proper OperationOutcome in the response indicating blocked data due to consent directive. | |
| 12 | Where query is made against Temporary Consent Override, the API must return response “information unblocked” to all users at the organization for the four-hour duration. |
Patient Identification
Patient identifier is required to uniquely identify a patient. Ontario health card number should be provided when available. Submitting organization issued medical record number may also be used. Implementers shall contact Ontario Health to obtain the system URL for submitting medical health number.
Provider Identification
Practitioner identifier is required to uniquely identify a practitioner. The practitioner’s license number or registration number issued by the regulatory college shall be provided.
Organization Identification
Organizations in acCDR are identified by OIDs assigned by OH. Additional identifiers such as UPIs may be supported in the future.