Conveys the mandated workflow action that an information custodian, receiver, or user must perform. Usage Note: Per ISO 22600-2, ObligationPolicy instances "are event-triggered and define actions to be performed by manager agent". Per HL7 Composite Security and Privacy Domain Analysis Model: This value set refers to the action required to receive the permission specified in the privacy rule. Per OASIS XACML, an obligation is an operation specified in a policy or policy that is performed in conjunction with the enforcement of an access control decision.