Verifiable Health Links
1.0.0-comment - ballot International flag

This page is part of the Verifiable Health Links (v1.0.0-comment: Publication Ballot 1) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Requirements: Record Consent

Official URL: https://profiles.ihe.net/ITI/VHL/Requirements/RecordConsent Version: 1.0.0-comment
Active as of 2026-06-14 Computable Name: RecordConsent

The VHL Sharer SHALL record the consent granted by a VHL Holder to authorize the sharing of their health data via a Verified Health Link (VHL). This consent confirms that the Holder agrees to the creation of a VHL and its use by authorized VHL Receivers to access specific health documents.

In this requirement, the VHL Sharer acts as a Consent Recorder, as defined in the Privacy Consent on FHIR (PCF) profile. Specifically, the Sharer SHALL initiate the Access Consent - ITI-108 transaction to formally capture the Holder's consent.

The ITI-108 transaction SHOULD be invoked as part of the actions triggered by a Generate VHL request, particularly when legal, jurisdictional, or organizational policy requires explicit, recorded consent prior to enabling document sharing.

This requirement enables lawful, transparent sharing of personal health information across organizations and trust domains.

These requirements apply to the actor VHL Sharer

Use ITI 108SHOULD

ITI-108 Transaction is invoked by VHL Sharer.

Record ConsentSHALL

Record consent as a FHIR Consent resource that documents

  • the data subject(VHL Holder)
  • The purpose of use
  • The authorized data recipients (i.e., permitted VHL Receivers)
  • The scope of data (e.g., specific documents or resource types)
  • The duration or validity period of the consent
Update ConsentSHALL

VHL Sharer SHALL support updating of Consent by the VHL Holder, which may include even revocation of consent.