Defines constraints on the AuditEvent Resource to record when a De-Identification happens at the Source. Note that a De-Identification event often impacts many different patients, so many AuditEvent resources need to be created so that each Patient is individually represented. This prevents leakage of other patients' that were also De-Identified at the same time.

• Export event
• subtype of deidentify or pseudonymize
• shall have source of itself
• shall have a source agent
• should have a recipient agent(s) if known
• may have user, app, organization agent(s)
  • combine with the Security Token pattern
• should have the custodian that released the data
• should have the authorizer that represented the patient (may be the patient)
• shall have a patient entity
• may have the consent that authorized the de-identification
• may have the authorizing client token (saml, jwt, etc)
• may have the set of data entity(ies)