3.4.6 Data Provenance

Data Authenticity, Provenance, and Associated Metadata

Overview

This category is about the attribution of sources of data (provenance) and assurance of data authenticity.

Related Regulations and Standards

The following are examples of standards for data provenance. Even though they are specific to the FHIR and CDA standards respectively, the principles and data elements -- for recording entities and processes involved in producing or delivering a resource (data) – may be applicable.

• FHIR Provenance Resource http://www.hl7.org/FHIR/provenance.html 
• HL7 CDA® R2 Implementation Guide: Data Provenance, Release 1 - US Realm http://www.hl7.org/implement/standards/product_brief.cfm?product_id=420
• ISO 21089 Health Informatics – Trusted End-to-End Information Flows. https://www.iso.org/standard/35645.html  Offers a guide to trusted end-to-end information flow for health(care) records and to the key trace points and audit events in the electronic entity/act record lifecycle (from point of record origination to each ultimate point of record access/use).

Implementation Guidance

None: recommendations are solicited.

3.4.5 Transport Security 3.4.7 Data Exchange