An Obligation Policy may be used to specify additional privacy preferences specified by a Subject of Care. An Obligation Policy may be specified in addition to a Refrain Policy to fully describe a client’s access control preferences. In some cases, an Obligation Policy may be used to indicate that the receiver of an information object may not be allowed to re-disclose or persist that information object indefinitely. Per ISO 22600-2, Obligation Policy instances "are event-triggered and define actions to be performed by manager agent." [HL7 DAM]
An obligation is an operation specified in a policy or policy set performed in conjunction with the enforcement of an authorization decision. [XACML] In short, obligations are actions to be performed. [ISO 22600-2]
This class is derived from ISO 22600-2 and HL7 DAM.

Attributes
«CS» Code	obligationPolicyType	This attribute identifies the action required before completing the step in the workflow. We assume it is coded concept but in today's implementations it's primarily an ad-hoc rule reference (e.g., the name of a data base stored procedure). An obligation may be associated with the release of an object. For example, it may require a signature. This information is passed as rule for an application to enforce. In other cases it may require that an audit record be created.

Attributes inherited from  FHIM::SecurityAndPrivacy::AtomicPolicy

ruleText,  implementableRule,  securityContext

Attributes inherited from  FHIM::SecurityAndPrivacy::Policy

authority,  description,  effectiveTime,  identifier,  mimeType,  name,  securityRole,  status,  uri

 obligationPolicyType

Public «CS» Code obligationPolicyType

This attribute identifies the action required before completing the step in the workflow. We assume it is coded concept but in today's implementations it's primarily an ad-hoc rule reference (e.g., the name of a data base stored procedure). An obligation may be associated with the release of an object. For example, it may require a signature. This information is passed as rule for an application to enforce. In other cases it may require that an audit record be created.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	ObligationPolicy
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	obligationPolicyType
Name Expression
Namespace	ObligationPolicy
Opposite
Owner	ObligationPolicy
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::ObligationPolicy::obligationPolicyType
Stereotype
Template Parameter
Type	«CS» Code
Upper	*
Upper Value	(*)
Visibility	Public