Policy management
Patients use the policy management to view, express and alter privacy policies policy.
These policies contain access rights as well as the right to further disclose their data third parties. They can be annotated with obligations for use or disclosure. The deployed security model as well as security processes are beyond the scope of this paper