---
type: "example"
title: "AuditEvent Example: auditevent-example-disclosure"
resource: "AuditEvent"
example: "auditevent-example-disclosure"
---
# AuditEvent Example: auditevent-example-disclosure

## Example XML



```xml
<AuditEvent xmlns="http://hl7.org/fhir"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation="http://hl7.org/fhir ../../schema/auditevent.xsd">
	<id value="example-disclosure"/>
	<type>
		<coding>
			<system value="http://dicom.nema.org/resources/ontology/DCM"/>
			<code value="110106"/>
			<display value="Export"/>
		</coding>
	</type>
	<subtype>
		<coding>
			<code value="Disclosure"/>
			<display value="HIPAA disclosure"/>
		</coding>
	</subtype>
	<action value="R"/>
	<severity value="notice"/>
	<recorded value="2013-09-22T00:08:00Z"/>
	<outcome>
		<code>
			<system value="http://terminology.hl7.org/CodeSystem/audit-event-outcome"/>
			<code value="0"/>
			<display value="Success"/>
		</code>
		<detail>
			<text value="Successful Disclosure"/>
		</detail>
	</outcome>
	<authorization>
		<coding>
			<system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
			<code value="HMARKT"/>
			<display value="healthcare marketing"/>
		</coding>
	</authorization>
	<!-- patient whos data got disclosed -->
	<patient>
		<reference value="Patient/example"/>
	</patient>
	<agent>
		<!-- who disclosed the data -->
		<type>
			<coding>
				<system value="http://dicom.nema.org/resources/ontology/DCM"/>
				<code value="110153"/>
				<display value="Source Role ID"/>
			</coding>
		</type>
		<who>
			<identifier>
				<value value="SomeIdiot@nowhere"/>
			</identifier>
			<display value="That guy everyone wishes would be caught"/>
		</who>
		<requestor value="true"/>
		<location>
			<reference value="Location/1"/>
		</location>
		<policy value="http://consent.com/yes"/>
		<networkString value="custodian.net"/>
	</agent>
	<agent>
		<!-- who received the data -->
		<type>
			<coding>
				<system value="http://dicom.nema.org/resources/ontology/DCM"/>
				<code value="110152"/>
				<display value="Destination Role ID"/>
			</coding>
		</type>
		<who>
			<reference value="Practitioner/example"/>
			<display value="Where"/>
		</who>
		<requestor value="false"/>
		<networkString value="marketing.land"/>
		<authorization>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
				<code value="HMARKT"/>
				<display value="healthcare marketing"/>
			</coding>
		</authorization>
	</agent>
	<source>
		<!-- what system detected this disclosure -->
		<observer>
			<display value="Watchers Accounting of Disclosures Application"/>
		</observer>
		<type>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/security-source-type"/>
				<code value="4"/>
				<display value="Application Server"/>
			</coding>
		</type>
	</source>
	<entity>
		<!-- data that got disclosed -->
		<what>
			<reference value="Patient/example/_history/1"/>
			<identifier>
				<value value="What.id"/>
			</identifier>
			<display value="data about Everthing important"/>
		</what>
		<role>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/object-role"/>
				<code value="4"/>
				<display value="Domain Resource"/>
			</coding>
		</role>
		<securityLabel>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/v3-Confidentiality"/>
				<code value="V"/>
				<display value="very restricted"/>
			</coding>
		</securityLabel>
		<securityLabel>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
				<code value="STD"/>
				<display value="sexually transmitted disease information sensitivity"/>
			</coding>
		</securityLabel>
		<securityLabel>
			<coding>
				<system value="http://terminology.hl7.org/CodeSystem/v3-ActCode"/>
				<code value="DELAU"/>
				<display value="delete after use"/>
			</coding>
		</securityLabel>
	</entity>
</AuditEvent>
```