DATE: 01-05-2024 STATUS: FOR REVIEW
The authorization service is a generic function that is used for both healthcare and other applications of health data.
The interpretation below is inspired by that of the Twiin set of agreements (in the primary process) and will be supplemented later if necessary.
Authorization determines whether a data user may use data based on a granted permit. The data to be consulted must be proportional. This means that the content and size of the data must match the purpose for which and the context in which he wants to use the data. This is agreed in the granted permit.
Those who grant the license are the Data Access Committees. The authorization is registered with the data holder.
The NEN standard associated with this function is NEN 7520 (under development)
Required functionality
National agreements on dealing with authorization in data exchange between data holders.
Agreements about where the authorizations are tested in a request.
Agreements about where the permit is stored