01 / Operational model
Who acts, and what changes?
Principal and authority origin
An agent operating on behalf of a care or operations user. Verified treatment, payment or operations task and applicable access policy.
Consequential action
Read or disclose a patient record.
02 / Action-time control
Make the requested effect testable.
Patient, data category, minimum necessary scope and recipient. Evaluate each read or disclosure against task and patient context; deny bulk export outside scope.
OriginVerified treatment, payment or operations task and applicable access policy
RequestRead or disclose a patient record
DecisionEvaluate and enforce before effect
03 / Evidence and responsibility
Permission, execution, and outcome are separate.
Task, accessor, data classes, recipient, decision and EHR disclosure log.
The covered entity determines HIPAA basis, consent and minimum necessary policy.
Primary source