Brontekst bekijken van FHIR:V1.0 FHIR IG R4

__NOINDEX__
__NUMBEREDHEADINGS__
{{DISPLAYTITLE:Nictiz FHIR R4 Implementation Guide {{VersieInfo|FHIR_IG_R4|release=V1.0}}}}

__TOC__

=Introduction=
This implementation guide (IG) describes the requirements for using '''HL7® FHIR®''' in context of information standards that are maintained by Nictiz. It applies specifically to HL7® FHIR® version 4.0.1 (R4).

This IG is aimed at software vendors and developers that need to implement FHIR-based information standards maintained by Nictiz. Users of this guide are expected to be familiar with the [https://hl7.org/fhir/R4 FHIR R4 specification] and resource processing. Where relevant, links to the FHIR specification are provided. This implementation guide is not intended to be a tutorial on that subject. This IG uses the conformance verbs (SHALL, SHOULD, MAY) defined in the FHIR Conformance Rules. Requirements that use the verb 'SHOULD' are treated as 'comply or explain' during compliance testing ('qualification').

This IG describes overarching principles all Nictiz standards implemented in FHIR R4 SHALL conform to. However, information standard specific IGs or profiles can extend, specialize or overrule these principles if explicitly documented. These principles SHALL NOT break conformance to the FHIR Core specification.
<section begin=OverarchingPrinciples />
=Overarching principles=
==Functional definitions==
Most, if not all, conformance resources are based on an underlying functional model. The functional model is the specification to which the conformance resources should adhere.

The basis for most other functional models is formed by the [https://zibs.nl/wiki/HCIM_Mainpage 'zibs' ('Zorginformatiebouwstenen')], in English also known as Clinical Information Models (CIMs), Health and Care Information Models (HCIMs) or Clinical Building Blocks (CBBs) - we will use the Dutch term 'zib' for all profiling work as it has become a recognizable term over the past years. The zibs were originally defined by the program ‘Registratie aan de bron’ (Data capture at the point of care). This program ended in April 2022 and maintenance and further developement of zibs was transferred to the Nictiz' zib-centrum. Zibs provide a foundation of use case neutral building blocks from which use cases can be built. The formal definition of the zibs can be found on the [https://zibs.nl zibs wiki]

Use cases or information standards use and refine zibs that are relevant to the situation. The formal specification for these information standards (a data set constrained with cardinalities and conformance applied, comparable to what FHIR calls a ''logical model'') is linked to from the information standard specific IG.

===Layering: zibs, nl-core profiles and information standard specific profiles===
The profiles and other conformance resources align to this layering of information standards. We recognize three levels of profiles:
; zib profiles: profiles that represent the zib as faithfully as possible.
; nl-core profiles: profiles derived from the zib profiles that might have been enriched by concepts from different use cases that apply the zib. See [[#The nl-core layer]] for more information.
; information standard specific profiles: optional derived profiles from the nl-core profiles that further restrict or enhance these profiles for a specific use case.

===The zib layer===
The goal of the zib layer is to create a faithful representation of each zib in FHIR. Because zibs are most often not suitable for direct implementation, the profiles in the zib layer have {{fhir|StructureDefinition.abstract}} set to {{term|true}}.

===The nl-core layer===
The goal of the nl-core layer is to ensure that similar concepts defined at use case level are implemented in a uniform way at FHIR level. Whether the concept is used by a single or multiple use cases is irrelevant – adopting it at the intermediate nl-core level provides clear guidance for future use.

Concepts implemented at the nl-core level can be expected to be reused across use cases. Concepts that have little or no opportunity for reuse are expected to be defined at information standard specific level to avoid clutter at the nl-core level. Where possible, information standards aim to use nl-core profiles when exchanging FHIR resources.

===Relating FHIR profiles to its functional counterpart===
All profiles have a traceable relationship with their functional counterparts based on the element mapping mechanism in FHIR. This allows to:
# define one or more references from a FHIR profile to an external URL where the functional definition can be found
# define for each FHIR profile element to which concept ''within'' a functional definition it corresponds

The functional definition(s) underlying the profile can be resolved using the [https://hl7.org/fhir/R4/structuredefinition-definitions.html#StructureDefinition.mapping {{fhir|StructureDefinition.mapping}}] metadata field of a profile. To relate a FHIR profile field to a concept from the functional description, the concept ID defined in the [https://hl7.org/fhir/R4/elementdefinition-definitions.html#ElementDefinition.mapping {{fhir|ElementDefinition.mapping}}] can be used to look up the concept in the functional definition. It is possible that a single profile element refers concepts from multiple functional descriptions. Simplifier will show an overview of all the mappings for a FHIR profile on the dedicated 'Mappings' tab, together with a clickable URL to the functional definition. In addition, on the 'Overview' tab for each field the relevant mapping can be found.

===Use of {{fhir|.mustSupport}}===
The basic notion for any element or extension in a profile, most specifically when it has a mapping to a functional definition, is: provide what you have, and support what you can. At the generic profiling levels - zib and nl-core - we can not know what the exact context of use will be. We can therefore never be sure that a formal FHIR [http://hl7.org/fhir/r4/elementdefinition-definitions.html#ElementDefinition.mustSupport {{fhir|mustSupport}}] flag by any definition would hold in every imaginable use case. Therefore, {{fhir|mustSupport}} flags are absent in zib and nl-core profiles. The way to know the exact requirements for the use case at hand is thus not immediately clear from just looking at the generic profiles, but from reading the functional specification that should be part of any information standard.

An information standard may provide additional use case or transaction specific profiles,  which constrain cardinality and apply {{fhir|mustSupport}} as applicable, for extra implementation guidance.

==Profiling guidelines==
All conformance resources created within Nictiz follow the conventions as outlined in the [[FHIR:Vprepub-1.0_FHIR_Profiling_Guidelines_R4|FHIR Profiling Guidelines for FHIR R4]].

==HTTP headers==
===Content Types and encodings===
The information standards use the [https://hl7.org/fhir/R4/http.html FHIR RESTful framework]. Of [https://hl7.org/fhir/R4/http.html#mime-type the formats defined], servers SHALL support both XML (MIME-type <code>application/fhir+xml</code>) and JSON (MIME-type <code>application/fhir+json</code>). Clients MAY use either format for the request and the response. This means that clients can indicate the desired response format using the optional <code>_format=[mimetype]</code> URL parameter, or the acceptable response format(s) using the <code>Accept</code> header. The URL parameter takes precedence over the header. If a client does not request a specific content-type, then it is server discretion to respond using XML or JSON.

FHIR uses UTF-8 for all request and response bodies. Since the [https://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.7.1 HTTP specification (section 3.7.1)] defines a default character encoding of ISO-8859-1, requests and responses SHALL explicitly set the character encoding to UTF-8 using the <code>charset</code> parameter of the MIME-type in the <code>Content-Type</code> header. Requests MAY also specify this <code>charset</code> parameter in the <code>Accept</code> header and/or use the <code>Accept-Charset</code> header.

===Multiple FHIR versions on the same server endpoint===
Servers are allowed to support different FHIR versions on the same endpoint. For this reason, both servers and clients are encouraged to be explicit about the version used during any exchange. They also should be aware of the pitfalls of not being explicit; most notably, a client could encounter a response from the server in an unknown format when making informal assumptions about the FHIR version being used.

For clients, the following rules and guidelines apply:
* Clients SHALL use the appropriate FHIR version for the server endpoint. Clients may use any FHIR-based or other method for version discovery, including but not limited to:
** Checking the {{fhir|CapabilityStatement.fhirVersion}} in the server CapabilityStatement: <code>GET [base]/metadata</code>.
** Checking the server endpoint <code>[base]/$versions</base></code>; note however that servers are not required to support this operation.
** Using a (FHIR) service/endpoint registry.
* Clients SHOULD include the <code>fhirVersion</code> parameter in the <code>Accept</code> header of each request, for example: <code>Accept: application/fhir+json;fhirVersion=4.0</code>.
* Clients SHOULD include the <code>fhirVersion</code> parameter in the <code>Content-Type</code> header of each request that has this header, for example: <code>Content-Type: application/fhir+json;fhirVersion=4.0</code>.
* When both the <code>Accept</code> and <code>Content-Type</code> headers are used, clients SHALL use the <code>fhirVersion</code> parameter either in both or in none of these headers, and the value of the <code>fhirVersion</code> parameter SHALL match in both headers.

For servers, the following rules and guidelines apply:
* For servers that support a single FHIR version on their endpoint:
** Servers MAY choose to ignore the <code>fhirVersion</code> in the <code>Accept</code> and/or <code>Content-Type</code> headers of incoming requests.
** In case of a mismatch between the requested <code>fhirVersion</code> and the supported <code>fhirVersion</code>(s), servers SHALL respond with HTTP status 400 Bad Request and SHOULD include an OperationOutcome with {{fhir|.severity}} set to {{term|fatal}} and {{fhir|.code}} set to {{term|exception}}, and SHOULD include a {{fhir|.details}} element that outlines the mismatch.
* For servers that support multiple FHIR versions on their endpoint:
** Servers SHALL process requests in accordance with a matching <code>fhirVersion</code> parameter in the <code>Accept</code> and <code>Content-Type</code> headers of incoming requests. This means that they SHALL format data according to the profiles specified for the matching FHIR version.
** <p>Servers SHALL support a default version in absence of the <code>fhirVersion</code> parameter in the <code>Accept</code> and <code>Content-Type</code> headers.</p><p>Note: When a server previously supported FHIR STU3 on an endpoint, it makes sense to set STU3 as the default version to remain compatible with existing clients. Newer R4 implementations of clients are expected to use the <code>fhirVersion</code> parameter, whereas this was not the case for STU3 implementations.
** In case of a mismatch between the requested <code>fhirVersion</code> and the supported <code>fhirVersion</code>(s), servers SHALL respond with HTTP status 400 Bad Request and SHOULD include an OperationOutcome with {{fhir|.severity}} set to {{term|fatal}} and {{fhir|.code}} set to {{term|exception}}, and SHOULD include a {{fhir|.details}} element that outlines the mismatch.

==Use of coded concepts==
===Textual description of coded concepts===
Coded information is important for interoperability between systems. The zibs prescribe which ValueSets and CodeSystems to use for all its concepts.

However, it is likely that unknown codes present themselves in the communication, for example because the sending system has updated its medication codes to a newer version than the receiving system, or because an older record item is coded in a way that now has been deprecated. It is therefore vital that, in addition to the code itself, the sender includes the semantics of the code. Therefore, systems SHOULD include [https://hl7.org/fhir/R4/datatypes.html#coding {{fhir|(CodeableConcept.)coding.display}}] and/or [https://hl7.org/fhir/r4/datatypes.html#codeableconcept {{fhir|CodeableConcept.text}}] for coded data in FHIR instances. These fields may only be absent in rare circumstances, for example when dealing with historical data, or in data acquired without such info from a third party. If multiple {{datatype|codings}} are available, at least one {{fhir|.coding.display}} SHALL be available, which SHALL be the value most relevant to the use case.

If {{fhir|(CodeableConcept.)coding.display}} cannot be retrieved [https://www.hl7.org/fhir/r4/datatypes.html#Coding from the relevant code system], it may be retrieved from the {{fhir|ValueSet}} that is bound to the relevant element. Any other value for {{fhir|.coding.display}} will trigger a warning during validation. The semantic validity of the display value will then have to be assessed. 

The [https://hl7.org/fhir/R4/datatypes.html#CodeableConcept spec on CodeableConcept] offers guidance on how the presence of {{fhir|CodeableConcept.text}} can be handled. Usually, the value of {{fhir|.text}} will be preferred above {{fhir|.coding.display}}, unless one of the {{datatype|codings}} is flagged with {{fhir|.userSelected}} = {{term|true}}. A {{fhir|.coding}} equivalent to {{term|other}} (often {{fhir|.code}} {{term|OTH}} in {{fhir|.system}} {{term|<nowiki>http://terminology.hl7.org/CodeSystem/v3-NullFlavor</nowiki>}}) leads to {{fhir|.text}} containing the actual meaning of the concept. For example: given an element for eye color with a bound ValueSet with concepts {{term|blue}}, {{term|brown}} and {{term|OTH}}, if {{fhir|.coding.code}} is filled with {{term|OTH}}, {{fhir|.text}} is to be filled with {{term|green}} (or any other color that is not represented in the ValueSet). Systems SHALL present the value of {{fhir|.text}} to its users.

===Code system URIs===
A coded value in FHIR is communicated as a combination of a code (in {{fhir|.code}}) and the canonical URI for the code system from which it was drawn (in {{fhir|.system}}). Implementers SHALL use the canonical URI that can be found by inspecting the ValueSet that is bound to a coded element in the appropriate FHIR profile<ref>Although the canonical URI is not formally defined in the ValueSet, in practical terms it can be found here.</ref>. Please note that a code system URI ''can'' align with its OID (as a <code><nowiki>urn:oid:[oid]</nowiki></code> URI), but that this is not always the case. For example, SNOMED CT is referenced by URL rather than by <code><nowiki>urn:oid:[oid]</nowiki></code><ref>For an overview of URLs defined, see [https://www.hl7.org/fhir/R4/terminologies-systems.html the FHIR core specification] or [http://hl7.nl/wiki/index.php?title=OIDs_en_FHIR_System_URIs HL7 NL for the Dutch realm].</ref>.

===Mapping of coded concepts===
Terminology from zibs or UCSDs (use case specific data sets) needs to be faithfully applied to the FHIR profiles, but this is not directly possible when the base FHIR resource defines required terminology that bears no direct relationship with the zibs or UCSD. These cases include, but are not limited to, the FHIR resource elements of data type {{datatype|code}} (for example {{fhir|Patient.gender}}, {{fhir|status}} elements, structural type elements). This data type always describes FHIR specific terminology, which usually doesn't align with the zibs/UCSD terminology.

In these cases, a mapping will be provided to explain the relationship between the zib/UCSD terminology and the FHIR terminology. This is normally done through a FHIR [https://hl7.org/fhir/R4/conceptmap.html ConceptMap], which can translate between the terminology used in the zib/UCSD, and the terminology that FHIR instances need to adhere to. This ConceptMap will be linked to the existing ValueSet using the [https://www.hl7.org/fhir/extension-11179-permitted-value-conceptmap.html permitted-value-conceptmap extension]. When the ConceptMap {{fhir|equivalence}} is not {{term|equal}} or {{term|equivalent}}, the terminology from the zib/UCSD SHALL be communicated using the extension [https://simplifier.net/resolve?target=simplifier&canonical=http://nictiz.nl/fhir/StructureDefinition/ext-CodeSpecification ext-CodeSpecification] on the same element. It is recommended to use this extension in other {{fhir|equivalence}} situations as well. This allows unambiguous interpretation on the receiver end.

Example snippet from an instance of {{Simplifier|http://nictiz.nl/fhir/StructureDefinition/nl-core-AllergyIntolerance|title=AllergyIntolerance}} where in {{fhir|.criticality}} both the FHIR terminology {{term|high}} and the SNOMED CT {{term|24484000}} terminology are communicated. The FHIR terminology is obtained from the zib terminology using ConceptMap {{Simplifier|http://nictiz.nl/fhir/ConceptMap/MateVanKritiekZijnCodelijst-to-AllergyIntoleranceCriticality|title=MateVanKritiekZijnCodelijst_to_AllergyIntoleranceCriticality}}:

<syntaxhighlight lang="xml">
<criticality value="high">
  <extension url="http://nictiz.nl/fhir/StructureDefinition/ext-CodeSpecification">
    <valueCodeableConcept>
      <coding>
        <system value="http://snomed.info/sct"/>
        <code value="24484000"/>
        <display value="Severe"/>
      </coding>
    </valueCodeableConcept>
  </extension>
</criticality>
</syntaxhighlight>

==Use of the reference data type==
A key feature of FHIR is the ability of resources to reference each other. This is done using the [https://hl7.org/fhir/R4/references.html#Reference {{datatype|Reference}} data type]. This data type supports two modes of referencing:
; [https://hl7.org/fhir/R4/references.html#literal Literal references], using the {{fhir|.reference}} element: A relative or absolute REST endpoint containing the {{fhir|.id}} of the referenced resource. In a Bundle context, this may also be a reference to a {{fhir|Bundle.resource.fullUrl}}.
; [https://hl7.org/fhir/R4/references.html#logical Logical references], using the {{fhir|.identifier}} element: Meaning a match on the business identifier ({{fhir|.identifier}}) for the referenced resource, without specifying where to find the referenced resource. Note: confusingly, although this reference type is called "logical reference", it does ''not'' act on the "logical identifier" ({{fhir|.id}}) of resources.

Profiles usually do not constrain which resources may be targeted from a given element. For example, {{fhir|Condition.subject}} may point to a Patient or Group resource. The {{Simplifier|http://nictiz.nl/fhir/StructureDefinition/nl-core-Problem|title=nl-core-Problem}} profile adds nl-core-Patient as a third option, to adhere both to [[FHIR:Vprepub-1.0_FHIR_Profiling_Guidelines_R4#Open_vs._closed_world_modeling|open world modelling]] and a need to provide useful guidance on how this reference should be handled. However, use case specific profiles may constrain the target profiles.

The basic requirements for using references in this context are:
* Either a literal or logical reference SHALL be specified.
** Literal references are preferred over logical references where possible.
* Literal references SHALL be resolvable.
** External references SHALL be regarded in the same context as the resource itself. If the current security context is insufficient for retrieving the reference, then additional negotiation for appropriate privileges may be required.
** Relative references are preferred over absolute references.
* A short description of the target resource SHOULD be included using the {{fhir|.display}} element.
* The resource type of the target resource SHOULD be included using the {{fhir|.type}} element.

In some circumstances, the constraints on the target resource type are too strict for the use case and the appropriate resource can't be referenced. In such cases, the proper reference type is added using an extension within the element that is used to refer the other resource. To aid receiving systems that cannot handle the extension, the sending system SHOULD give as much information as possible in the main element, for example by repeating the {{fhir|.display}} used in the extension in the main element.

==Profile use and declaration==
The implementation guides for the various information standards list the package version and profiles to use for the FHIR resources. A profile is a statement about the rules that this resource was created against. In the interest of interoperability it is important that, when using said information standard:
* Each resource SHALL be a valid instance of the applicable profile. Note that this applies not only to profiles listed directly in the IG, but also to profiles referred from/used by listed profiles.
* Each resource SHALL include the canonical URL of this profile in the {{fhir|.meta.profile}} element. If the applicable profile is an [[#Layering:_zibs.2C_nl-core_profiles_and_information_standard_specific_profiles|information standard specific profile derived from an nl-core profile]], the canonical URL of the latter SHALL be included in an additional {{fhir|.profile}} element. The canonical of compatible base or derived profiles MAY be included as well.
* A receiving system MAY use the stated value of {{fhir|.meta.profile}} for validation, documentation or other purposes.
* A receiving system MAY use other profiles than stated in {{fhir|.meta.profile}}, e.g. when it has derived more constrained profiles based on the stated {{fhir|.meta.profile}}. Reasons for additional validation may include protecting the integrity of the receiving system or determination of internal process flow.
* The use of a version (appended to the canonical URL, separated by a vertical bar <code>|</code>) is strongly discouraged, because declaring compatibility this way is incompatible with any SemVer Grammar (e.g. it is not possible to declare a <code>|1.x</code> compatibility in a {{datatype|canonical}}).

===FHIR Packages===
The information standards maintained by Nictiz adopt the FHIR Packaging mechanism to support consistent versioning of profiles and related conformance resources such as OperationDefinitions. FHIR Packaging is based on the NPM Packaging mechanism and offers developers a convenient way to include the conformance resources in their favorite IDE. The relevant package version is indicated and linked in the information standard specific IG.

Please note that every effort has been made to ensure that the examples contained in the packages are correct and useful, but they are not a normative part of any information standard. 

For more background information:
* [https://confluence.hl7.org/display/FHIR/NPM+Package+Specification The HL7 base specification for FHIR packages]
* [https://registry.fhir.org/learn What are FHIR Packages?]
* [https://blog.fire.ly/2017/11/28/versioning-and-canonical-urls/ What is the problem that packaging could address]

'''Note''': It is '''not''' required to implement FHIR-based information standards using the packaging mechanism. It is still possible to download all or selected resources from Simplifier on as-needed basis. You are however encouraged to invest in dealing with packages.

==Search==

===Search URLs and search parameters===
Each query use case of the various information standards lists the search parameters to use for a client to query the relevant information on a server. Usually, this is done in the form of (a number of) search URL(s), although individual use cases may use some other form if necessary (for example, listing optional parameters). Regarding the search parameters, the following guidelines apply:

* Unless explicitly marked as optional, the listed search parameters are considered the minimum for a request, meaning that:
** All stated parameters and modifiers SHALL be supported both by clients and servers.
** All stated parameters and modifiers SHALL be used for searching as specified in the information standard.
* A client MAY use additional search parameters in the search (such as date-range) not defined in the information standard. These may serve to further constrain the result set.
* <span id="unknown_search_parameter_handling">A server MAY ignore and MAY support additional search parameters. A server SHALL report the applied parameters [https://www.hl7.org/fhir/R4/search.html#conformance in the self link] of the response and SHOULD provide additional information about the search process using an OperationOutcome in the search result Bundle (as an entry with {{fhir|.search.mode}} set to {{term|outcome}}). A client MAY use the self link and/or OperationOutcome to inform the user, independently apply these filters to the result set, or take some other action.</span>
* A server SHALL reject any search request that contains parameters suffixed by a modifier that the server does '''not''' support for that parameter. For example, if the server supports the {{fhir|name}} search parameter, but not the {{fhir|:exact}} modifier on the name, it should reject a search with the parameter {{fhir|1=name:exact=Bill}}, using an HTTP 400 error with an OperationOutcome with a clear error message.
* A server SHALL NOT return information that is out of scope for the defined use case or authorization, even if the request by the client is wider than the use case.
* Repeating search parameters constitute a logical AND. Repeating search parameter values constitute a logical OR. Where applicable, this will be described further in the implementation guide. 
* The order of the search parameters is always irrelevant.

General guidance on the use of search parameters can be found [https://www.hl7.org/fhir/R4/search.html in the FHIR specification].

====Search on date, number or quantity====
When a search parameter has a type of date, number or quantity, the request [https://www.hl7.org/fhir/R4/search.html#prefix uses prefixes] to control the search behavior. Unless explicitly stated otherwise, the minimum set of supported prefixes for these types is {{fhir|eq}}, {{fhir|gt}}, {{fhir|lt}}, {{fhir|ge}} and {{fhir|le}}. For example:
 GET [base]/Observation?date=ge2019-01-01&date=le2020-01-01
searches on all Observation resources that have an {{fhir|.effective[x]}} between January 1, 2019 and January 1, 2020.

===Search results===
====Including referenced resources====
It is possible that servers do not support read interactions, but all references from search results need to be resolvable (see [[#Use of the reference data type]]). Therefore servers MAY choose to include the referenced resources in the {{term|searchset}} Bundle, even if the client didn't use any {{fhir|_include}} parameters. These resources SHALL have {{fhir|Bundle.entry.search.mode}} set to {{term|include}}. Servers SHOULD NOT use contained resources for this purpose.

====Paging====
Servers MAY use [https://www.hl7.org/fhir/R4/http.html#paging paging] for performance reasons. Clients SHALL support this mechanism to prevent loss of information.

== Usage of the {{fhir|.id}}, {{fhir|.identifier}} and {{fhir|.fullUrl}} elements in FHIR instances ==
=== {{fhir|.identifier}} versus {{fhir|.id}} ===
FHIR recognizes two fields that are used as identifier for instances: {{fhir|.identifier}} and {{fhir|.id}}. Although these are both identifiers, they are unrelated and serve a completely different purpose:
* {{fhir|.identifier}} is a business identifier, which usually has a meaning ''outside'' of the server. Examples are a registration number of a healthcare provider, a BSN or social security number for citizens, ISBNs for books, etc. Any instance may have multiple kinds of identifiers.
* {{fhir|.id}} is the logical identifier, or technical identifier, akin to the id field in a database. It is used as a unique handle for an instance of a given type on a particular server, and is needed to construct the URL to the instance. As such, it is used for referring between resources. The {{fhir|.id}} has no further meaning outside of the server.

=== When is {{fhir|.identifier}} expected? ===
Source systems SHALL be responsible for assigning a business identifier to every identifiable information object. Source systems SHALL have a methodology in place to guarantee global uniqueness. This business identifier is assigned to the {{fhir|.identifier}} element of FHIR instances when sending the resource, using a {{fhir|.system}} (e.g. a URL or [[Hoofdpagina#Object_IDentifiers_.28OIDs.29|OID]] that is under control of the sending organization). Because in HL7v3 (CDA) an identifier can only be composed using OIDs, the {{fhir|.system}} should preferably be an OID to accommodate compatibility in transformations from FHIR. This is especially true for resources that are used in information standards that have an HL7v3 (CDA) component, such as the BgZ, GP data and Medication process.

Secondary systems, that are not the source of the resource, SHALL be responsible for maintaining the business identifier assigned by the source system as they obtained it.  The presence of the {{fhir|.identifier}} element helps receiving systems with re-identification and deduplication of resources.

=== When is {{fhir|.id}} expected? ===
As stated above, the logical id is meant to uniquely identify instances on a particular server; it is a vital component when using FHIR within a RESTful context. So as a rule of thumb, the {{fhir|.id}} element should always be present when dealing with instances that have a logical id, thus with instances on a server. This means:
* When a client reads, updates or otherwise addresses an existing resource on a server, the {{fhir|.id}} element SHALL be populated in the request and response, and it SHALL match the id in the request URL.
* When a client sends a ''new'' instance to a server using a create operation, the {{fhir|.id}} element is ''not'' expected to be present -- these new instances don't exist yet on the server, so a logical id has no meaning. However, the server SHALL assign a logical id and populate the {{fhir|.id}} element in the response.<br/>''Note'': It is not strictly prohibited to populate the {{fhir|.id}} field when sending a new instance, but the server SHOULD ignore it.
* When a client performs a search on a server, all instances in the returned searchset Bundle SHOULD have the {{fhir|.id}} field populated.<br/>''Note'': A server SHOULD try its best to create stable ids for the resources it serves. Omitting {{fhir|.id}} elements is strongly discouraged as it breaks the assumptions about RESTful behavior. However, a server that omits {{fhir|.id}}s is still considered conformant when the conditions below are met:
*# The server does not natively support logical ids, for example when it is a stateless middleware server that gets its input from a non-FHIR backend.
*# ''And'' the use case doesn't require read/update/delete/patch support for any of the returned or referenced resources, as stated by the CapabilityStatement for the information standard.
*# ''And'' the server includes all referenced resources in searchset Bundles (regardless of whether the client asked to do so). These resources refer to each other based on the fullUrl mechanism as described below.

=== Logical ids, {{fhir|.fullUrl}}s and references in Bundles ===

There are several FHIR operations, like searching or batch create operations, where multiple instances are placed together in a Bundle. These instances will usually contain references to each other. These internal references cannot be resolved simply by inspecting the {{fhir|.id}} element of every instance; it is not guaranteed that all instances have a logical id. Instead, Bundles allow an {{fhir|.entry.fullUrl}} element for each instance which may be used for references. This is an additional mechanism to the logical id, not a replacement:
* The [[#When_is_id_expected.3F|guidelines above]] for populating the {{fhir|.id}} field still apply. 
* If {{fhir|.id}} is present, {{fhir|.fullUrl}} SHALL correspond with it (see below).

{{fhir|.fullUrl}}s may be RESTful URLs, UUIDs or even OIDs, based on the situation (which may be mixed within the same Bundle):
; Instances with a logical id: If an instance can be accessed on the server using RESTful operations, the {{fhir|.id}} of that instance in the Bundle will be populated. The corresponding {{fhir|.fullUrl}} in this case SHALL be the absolute URL to the instance on the server.<p>Instances within the Bundle may use relative references to each other, like they are on the same server. The FHIR machinery specifies how to find the matching instance based on the {{fhir|.fullUrl}}.</p>
; Instances without a logical id: When instances are to be created on a server or when the server doesn't support reading individual instances, they don't have a logical id. When these id-less instances need to be referenced from within a Bundle, there are two alternatives:
:* <span id="uuid-as-logical-id"></span>UUIDs can be used as single-use ids that will change each time the Bundle is generated. The {{fhir|.fullUrl}} for the instance will be the UUID prefixed with <code><nowiki>urn:uuid:</nowiki></code>. <ref name="id-ambiguous">Some implementations may choose to populate the {{fhir|.id}} element with the unprefixed UUID or OID in cases when the {{fhir|.id}} field is expected, for example in searchset Bundles. The FHIR specification is ambiguous on the requirements to do so. For a long discussion on the topic, see [https://chat.fhir.org/#narrow/stream/179166-implementers/topic/Confused.20about.20URN.20fullUrl's.20and.20resource.2Eid's chat.fhir.org].</ref>
:* <span id="oid-as-logical-id"></span>OIDs can be used if the instance has an OID-based ''business'' identifier (i.e. the {{fhir|.identifier}} field), like the UZI number of a healthcare provider. The {{fhir|.fullUrl}} will be the OID prefixed with <code><nowiki>urn:oid:</nowiki></code><ref name="id-ambiguous"/><ref>The use of OIDs as id has some limitations:
* The {{fhir|.id}} has a maximum length of 64 characters, so only OIDs that contain less than 64 characters can be used.
* OID-based ids are expected to be stable, just like RESTful ids. Different Bundle instances SHALL always use the same OID-based ids.
* Some ''objects'' may have multiple OID-based identifiers, like AGB and UZI for practitioners. Which one do you choose? And what happens when the UZI number becomes available after you've already used the AGB as {{fhir|.id}}?
* Specifically for HL7 V3 based backends: an HL7 V3 II data type normally consists of a <code>@root</code> (OID) and an <code>@extension</code> (string). Concatenation of <code>@root</code> and <code>@extension</code> only yields a new OID if <code>@extension</code> is numeric. Other combinations of <code>@root.@extension</code>, may yield a valid {{fhir|.id}} (pattern <code>[A-Za-z0-9\-\.]{1,64}</code>), but may not be a valid OID. In this case it is no longer possible to create a {{fhir|.fullUrl}} consistent with the {{fhir|.id}} based on the <nowiki>urn:oid:</nowiki> scheme.</ref>.
: Instances within the Bundle should use the prefixed version of the UUID/OID for referencing.

==== Example ====
Consider a client that wants to send a new Observation instance to a server and simultaneously link it to an existing Task instance. This can be done using a transaction Bundle:
<syntaxhighlight lang="xml" highlight="7-8,11,23-24,27-28,33-34,41-42" style="max-height:400px; overflow: auto;">
<Bundle xmlns="http://hl7.org/fhir">
    <!-- Transaction Bundle that will simultaneously create a new instance and update an existing one -->
    <type value="transaction"/>
    
    <!-- A new instance to create -->
    <entry>
        <!-- The new instance doesn't have a logical id yet, so a temporary UUID is used for references within the Bundle -->
        <fullUrl value="urn:uuid:0e855422-b8ef-4247-9443-f3747e78747e"/>
        <resource>
            <Observation>
                <!-- The id field is absent, because the instance doesn't exist yet on the server -->
                ...
            </Observation>
        </resource>
    </entry>
    <request>
        <method value="POST"/>
        <url value="Observation"/>
    </request>

    <!-- An existing instance to update with a reference to the new instance -->
    <entry>
        <!-- RESTful URL of existing Task instance -->
        <fullUrl value="http://example-xis.com/Task/1234"/>
        <resource>
            <Task>
                <!-- Logical id of the instance, matches the fullUrl -->
                <id value="1234"/>
                ...
                <output>
                    ...
                    <valueReference>
                        <!-- Reference to the fullUrl of the new instance -->
                        <reference value="urn:uuid:0e855422-b8ef-4247-9443-f3747e78747e"/>
                    </valueReference>
                </output>
            </Task>
        </resource>
        <request>
            <method value="PUT"/>
            <!-- The path on the server, consistent with fullUrl and id -->
            <url value="Task/1234"/>
        </request>
    </entry>
</Bundle>
</syntaxhighlight>

The server response should then look like:
<syntaxhighlight lang="xml" highlight="5-6,9-10,28-29" style="max-height:400px; overflow: auto;">
<Bundle xmlns="http://hl7.org/fhir">
    <type value="transaction-response"/>
    
    <entry>
        <!-- The newly created instance gets the logical id "5678" from the server -->
        <fullUrl value="http://example-xis.com/Observation/5678"/>
        <resource>
            <Observation>
                <!-- The id matches the fullUrl -->
                <id value="5678"/>
                ...
            </Observation>
        </resource>
    </entry>
    <response>
        ....
    </request>

    <entry>
        <fullUrl value="http://example-xis.com/Task/1234"/>
        <resource>
            <Task>
                <id value="1234"/>
                ...
                <output>
                    ...
                    <valueReference>
                        <!-- Reference to the created instance may be relative -->
                        <reference value="Observation/5678"/>
                    </valueReference>
                </output>
            </Task>
        </resource>
        <response>
            ....
        </response>
    </entry>
</Bundle>
</syntaxhighlight>

== Handling errors==
Errors in FHIR interactions are usually communicated using the combination of an appropriate HTTP status code in the 4xx-5xx range, and an [https://hl7.org/fhir/R4/operationoutcome.html OperationOutcome] resource providing more details regarding the error. The OperationOutcome resource contains mandatory elements to indicate the overall type and severity of the error (respectively {{fhir|.code}} and {{fhir|.severity}}) and MAY express the location (using {{fhir|.location}} or {{fhir|.expression}}) and a free-form or coded description of the error (using the {{fhir|.diagnostics}} or {{fhir|.details}} element). Although these latter elements are not required, their usage is strongly encouraged.

For the most common errors, the expected handling is listed in the table below. This should be interpreted as a guideline, as the nature of an error is not always unambiguous and various FHIR reference implementations will make different choices. The FHIR specification provides more detail [https://www.hl7.org/fhir/R4/http.html on error handling in general], [https://www.hl7.org/fhir/R4/security.html#AccessDenied access denied responses] and [https://www.hl7.org/fhir/R4/search.html#errors for search operations specifically].

In general, most FHIR-related errors (in addition to normal HTTP errors related to security, header and content type negotiation issues) will result in one of these HTTP status codes:
* 400 Bad Request - resource could not be parsed, search could not be processed or basic FHIR validation rules failed
* 401 Unauthorized - authorization is required for the interaction that was attempted (usually emitted by the authorization server)
* 403 Forbidden - the server was unable to execute the search, due to an authorization failure (usually emitted by the resource server)
* 404 Not Found - resource type not supported, or not a FHIR endpoint
* 422 Unprocessable Entity - the proposed resource violated applicable FHIR profiles or server business rules

{| class="wikitable"  
|- 
! Interaction 
! Error 
! Expected action 
! Example 
|-
| rowspan=3 |All 
| Not authorized, absent or expired access token
|
* HTTP 401 Unauthorized
* OperationOutcome with {{fhir|.code}} set to {{term|security}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Not_authorized|Example]]
|-
| Invalid authorization, scope of the access token is not sufficient for the request
| 
* HTTP 403 Forbidden
* OperationOutcome with {{fhir|.code}} set to {{term|security}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Invalid_authorization|Example]]
|-  
| Resource is not supported
|
* HTTP 404 Not Found
* OperationOutcome with {{fhir|.code}} set to {{term|not-supported}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Resource_is_not_supported|Example]]
|- 
| rowspan=4 |search
| No match for the given search parameters
| colspan="2" |''This is not considered an error, but a normal search without results.''
|-
| Unknown search parameter
| colspan="2" | ''This is not considered an error. See the [[#unknown_search_parameter_handling|guidance in the section on searching]].''
|- 
| Syntactically incorrect parameter
| 
* HTTP 400 Bad Request
* OperationOutcome. There are various issue type codes that could be used, depending on the nature of the error
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Syntactically_incorrect_parameter|Example]]
|-
| Known but unsupported value. This situation applies to non-supported profiles when the Resource endpoint itself is supported.
|
* HTTP 200 OK
* Empty Bundle of {{fhir|.type}} {{term|searchset}}.
* OperationOutcome in Bundle as an entry marked with {{fhir|Bundle.entry.search.mode}} set to {{term|outcome}}.
* OperationOutcome with {{fhir|.code}} set to {{term|not-found}} and {{fhir|.severity}} not set to {{term|fatal}} or {{term|error}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Unkown_or_unsupported_search_parameter_value|Example]]
|- 
| read
| Read request with unknown id
| 
* HTTP 404 Not Found
* OperationOutcome with {{fhir|.code}} set to {{term|not-found}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Request_on_an_unknown_id|Example]]
|- 
| update
|  No or incorrect Resource id 
|
* HTTP 400 Bad Request
* OperationOutcome with {{fhir|.code}} set to {{term|invalid}}.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#No_or_incorrect_Resource_id|Example]]
|- 
| create/update
| Resource syntax or data is incorrect, invalid or unsupported
| 
* HTTP 400 Bad Request or HTTP 422 Unprocessable Entity
* OperationOutcome with {{fhir|.code}} set to {{term|invalid}} or preferably a more specific child code.
| [[FHIR:Vprepub-1.0 FHIR_Error_handling_examples#Resource_syntax_or_data_is_incorrect_or_invalid|Example]]
|}

==CapabilityStatements==
Information standards may have a [https://www.hl7.org/fhir/stu3/capabilitystatement.html CapabilityStatement] that is informative in nature and does not represent the minimum or maximum set of capabilities the client or server should support. Nictiz will strive to provide CapabilityStatements that are as complete as possible, however for the exact set of capabilities the implementation guide of the corresponding information standard should be consulted.

==Including "secondary" resources when sending information==
When the client creates/updates a resource on a server, it often needs to reference and include "secondary" resources which are not the primary focus of the interaction - e.g. an Observation must indicate its subject using a reference to a Patient resource. The situation may arise that the client includes an instance of a resource that already exists on the server, in the transaction (for example, when the client doesn't know about the existing resource). In this case, the server should align these new resources with the ones it already has.

A data conflict may arise if these secondary resources carry details that are not of interest within the particular context of the information standard. For example, the client posts an Observation and sends along a Patient resource containing a different telephone number than the one that is on record at the server side. This change in telephone number is not relevant in this particular context, since the interaction is about creating the Observation.

Unless more specific guidance is given by the information standard, the following guidance applies for dealing with such conflicts:
* Sending secondary resources SHALL only be done when the information standard specifies that a {{fhir|transaction}} interaction is to be used<ref>Note that a {{fhir|batch}} interaction [https://hl7.org/fhir/r4/http.html#transaction SHALL not have interdependencies between resources] and therefore by definition is not suitable for use cases where secondary resources can be expected.</ref>.
* If so, the client MAY send a bare-bones instance as the secondary resource containing just minimal information, but this SHOULD include the information necessary for the server to match its own copy. The information standard MAY specify which information is minimally needed for such a secondary resource and MAY also restrict the information that is sent in the secondary resource.
* The client MUST include a {{fhir|Bundle.entry.request}} for each of the resources in the Bundle, including the secondary resources that are only there for referencing purposes. {{fhir|.request}} SHOULD be a <code>POST</code> to the appropriate endpoint. As an alternative, <code>PUT</code> MAY be used, but is strongly discouraged; if the client has knowledge on the id of the resource on the server, an absolute URL is strongly preferred.
* If the server can unequivocally deduplicate this secondary resource (for example, because the patient is already known from the security context or the healthcare provider is recognized by the UZI number), it MAY choose to ignore the differences of this resource or it MAY incorporate them (see the [https://hl7.org/fhir/r4/http.html#transactional-integrity the section on transactional integrity] in the FHIR specification). Please note that absence of information should not result in deletion of information on the server, as the client could send a bare-bones instance. If the server chooses to ignore the differences, it SHOULD do so silently by responding with a 200 OK status code for the corresponding {{fhir|Bundle.entry.response.status}} in the response Bundle.
* The server SHALL rewrite the references in the primary resource to the instance of the secondary resource it already has.

==Validation and terminology==
The outcome of profile based validation can depend on the tooling (validator, terminology server) and its settings used. Implementers should be aware of the following topics regarding terminology when validating instances of nl-core or derived profiles.

===SNOMED CT - Dutch edition===
Nictiz uses codes that are only present in the Dutch edition of SNOMED CT. Validators should take this edition (URI: <code><nowiki>http://snomed.info/sct/11000146104</nowiki></code>) into account when calling upon a terminology server. Without this edition, you may get a response suitable for the international edition.

===CodeSystems without concepts defined===
The zibs or UCSDs often prescribe the use of 'external' code systems, the contents of which may not be available without proper license. In FHIR, this is manifested by the use of ValueSets that contain {{fhir|ValueSet.compose.include.system}}, without specific {{fhir|.concept}}s, to indicate that all codes from the referenced CodeSystem are allowed. These CodeSystem resources have {{fhir|CodeSystem.content}} set to {{term|not-present}}. Some validators give a {{term|warning}} when a code from such ValueSet and CodeSystem is used, but some validators may give an {{term|error}}.

==Missing information==
When the ART-DECOR specification of a use case (or transaction) requires the presence of an element (cardinality 1..1 or 1..*) and is not defined to be mandatory (shown as Required or ‘R’), but data is missing, please use the following guidance. This guidance also applies if the FHIR cardinality of an element is 1..1.

# For ''non-coded'' data elements, use the [http://hl7.org/fhir/R4/extension-data-absent-reason.html Data Absent Reason Extension] with an appropriate code.
# For ''coded'' data elements:
#* ''Example'', ''preferred'', or ''extensible'' binding strengths (CodeableConcept data types):
#** If the source system has text but no coded data, the {{fhir|.text}} element is used. Use the appropriate {{term|other}} code from the ValueSet if available.
#** If there is neither text nor coded data:
#*** Use the appropriate {{term|unknown}} concept code from the ValueSet if available.
#*** If the ValueSet does not have the appropriate {{term|unknown}} concept code, use the [http://hl7.org/fhir/R4/extension-data-absent-reason.html Data Absent Reason Extension] with an appropriate code.
#* ''Required'' binding strength (CodeableConcept or code data types):
#** If the ValueSet includes the appropriate {{term|other}} code and the source system has text but no coded data, use the {{term|other}} code in combination with the {{fhir|.text}} element.
#** If there is neither text nor coded data, use the appropriate {{term|unknown}} concept code from the ValueSet if available.
#** If the ValueSet does not have an appropriate {{term|other}} or {{term|unknown}} concept code, you must use a concept from the ValueSet, otherwise the instance will not be conformant.

Profiles do not explicitly define when or how to apply FHIR DataAbsentReason.

=={{fhir|Resource.text}} or "the narrative"==
The FHIR R4 specification says instances SHOULD contain a human readable summary of the contained data, which can be used as fallback by the receiver. This human readable text is contained in the [https://hl7.org/fhir/R4/domainresource-definitions.html#DomainResource.text {{fhir|.text}} element] with data type [https://hl7.org/fhir/R4/narrative.html {{datatype|Narrative}}]. This human readable text is often referred to as "the narrative".

This implementation guide has the following expectations regarding the use of narratives:
* Senders SHOULD provide a "clinically safe" ([[#"Clinically safe" narratives|see below]]) narrative of status {{term|extensions}} (preferred) or {{term|generated}} ([[#Narrative status|see below]]), unless:
** The resource does not support narratives. This is the case for resources that do not derive from DomainResource, like Binary.
** The resource is contained in another resource.
** It is explicitly documented in the information standard to do otherwise.
* Receivers SHALL support the narrative. Ignoring the narrative is considered passive support. Support for the narrative SHALL be in accordance with the status and explicitly documented use in the relevant information standard.
* Receivers SHALL NOT generically depend on the presence of a clinically safe narrative as their only means to present data to users when an explicitly documented use case for status empty or additional exists. Also, using just the narrative you would not expect to produce graphs, support for medication alerts and other functionality.

==="Clinically safe" narratives===
Regarding the contents of the narrative, the [https://hl7.org/fhir/R4/domainresource-definitions.html#DomainResource.text FHIR R4 spec states] that:
<blockquote>The narrative need not encode all the structured data, but is required to contain sufficient detail to make it "clinically safe" for a human to just read the narrative.</blockquote>
And for the Narrative data type:
<blockquote>Structured data SHOULD NOT generally contain information of importance to human readers that is omitted from the narrative. Creators of FHIR resources should not assume that systems will render (or that humans will see) data that is not in the narrative.</blockquote>

The decision to what entails "clinically safe" information, is somewhat arbitrary. Guidelines for "clinically safe" inspired by the [https://hl7.org/fhir/R4/w5.html FHIR W5 report]:
* If you only had the narrative: the intention and context should be clear to you.
* Who. Patient/subject, performer, author and/or other primary actors. Is this about family history or the actual patient?
* What. The topic for the resource is clear.
* When. Is this past, present, or future information?
* Why. What led up to the event? E.g. Condition, Referral that caused Encounter or Procedure.
* Where. Location of the event/action in the resource.
* Context. Relevant context as present in the resource. E.g. status, Encounter, EpisodeOfCare, Diagnosis, Condition, BodySite.
* Rendering every identifier and/or code detail may not be necessary. {{fhir|Resource.text}} is for human assessment of the situation so emphasis should be on display text, representing identifier/code/system as relevant in the context.
    
Informal note: Producing a "clinically safe" narrative can be cumbersome. Various reference frameworks like [https://hapifhir.io/hapi-fhir/docs/model/narrative_generation.html HAPI] include a Narrative Generator of some sort.

===Narrative status===
    
Data type {{datatype|Narrative}} [https://hl7.org/fhir/R4/valueset-narrative-status.html defines different status codes] to indicate the origin of the narrative text. This implementation guide expects the most common use case to be the status {{term|extensions}}, which means that the narrative is generated entirely from the structured data and the extensions used. The reason for this is that most resources can have extension content defined on them. This status can still be used if a particular instance doesn't contain any extensions.

Alternatively, status {{term|generated}} may be used if the sender did not anticipate inclusion of regular extension content in the narrative.

'''Note''': for both status {{term|extensions}} and {{term|generated}}, all modifier extensions SHOULD be included in the narrative as they always affect the semantics.

Senders SHOULD NOT use the other possible statuses unless it is explicitly documented why, e.g. in an information standard. Receivers MAY choose to support narratives with status {{term|additional}}, which means that it holds information not contained in the structured data. Receivers - upon rendering narrative with status {{term|additional}} - SHOULD make it clear to the user that the information is a fragment, and not the entire thing, in some suitable way.
<section end=OverarchingPrinciples />
=Release notes=
{| class="wikitable" "cellpadding="10" style="background-color: white;"
!style="text-align:left;"|Release
!style="text-align:left;"|Version
!style="text-align:left;"|BITS ticket
!style="width:850px; text-align:left;"|Description
|-
{{ReleaseNotes|package=1|release=1.0.0|issues=1|MM-2856}}
|}

=Support=
For questions and change requests regarding this IG, please create a ticket in [https://bits.nictiz.nl/projects/MM BITS].