Audit Event for a Privacy Disclosure as recorded by a Recipient

Defines constraints on the AuditEvent Resource to record when a Privacy Disclosure is detected at the Recipient of the data.

• Import event
• shall have source of itself
• shall have a source agent
• shall have a recipient agent
• may have user, app, organization agent(s)

- combine with the Security Token pattern

• may, if known, have the custodian that released the data
• may, if known, have the authorizer that represented the patient (may be the patient)
• shall have a patient entity
• shall have a set identity entity