abstractbaseDefinitioncopyrightdatedescription- Values Differ
experimentalfhirVersionjurisdiction
jurisdiction[0]kindnamepublisherpurposestatustitletypeurlversion- Values Differ
| Left: | Nhật ký truy cập dữ liệu VN Core — VN Core AuditEvent Profile (http://fhir.hl7.org.vn/core/StructureDefinition/vn-core-audit-event) |
| Right: | Nhật ký truy cập dữ liệu VN Core — VN Core AuditEvent Profile (http://fhir.hl7.org.vn/core/StructureDefinition/vn-core-audit-event) |
| Error | StructureDefinition.version | Values for version differ: '0.3.0' vs '0.4.0' |
| Information | StructureDefinition.definition | Values for definition differ: 'The time when the event was recorded.' vs 'Thời điểm ghi nhận sự kiện audit. Cần đủ chính xác để phục vụ điều tra, thông báo vi phạm trong 72 giờ theo NĐ 356/2025/NĐ-CP Điều 42 và lưu vết an ninh mạng theo Luật 116/2025/QH15.' |
| Information | StructureDefinition.definition | Values for definition differ: 'The system that is reporting the event.' vs 'Hệ thống hoặc đơn vị phát sinh log. Log cần phục vụ truy vết xử lý dữ liệu y tế số theo NĐ 102/2025/NĐ-CP và baseline an ninh mạng theo Luật 116/2025/QH15.' |
| Name | Value | Comments | |
|---|---|---|---|
| abstract | false | ||
| baseDefinition | http://hl7.org/fhir/StructureDefinition/AuditEvent | ||
| copyright | |||
| date | 2026-03-23 | ||
| description | Profile AuditEvent cho Việt Nam. Dùng để ghi nhận truy cập, chỉnh sửa, chia sẻ, và xuất dữ liệu y tế/định danh nhạy cảm. Căn cứ: Luật Bảo vệ dữ liệu cá nhân 91/2025/QH15, NĐ 356/2025/NĐ-CP, Luật KCB 2023. | Profile AuditEvent cho Việt Nam. Dùng để ghi nhận truy cập, chỉnh sửa, chia sẻ, và xuất dữ liệu y tế/định danh nhạy cảm. Căn cứ: - **Luật 91/2025/QH15** — 26/6/2025 — bảo vệ dữ liệu cá nhân, dữ liệu y tế là dữ liệu nhạy cảm - **NĐ 356/2025/NĐ-CP** — 31/12/2025 — hướng dẫn BVDLCN; Điều 42 về thông báo vi phạm dữ liệu trong 72 giờ - **Luật 116/2025/QH15** — 10/12/2025 — Luật An ninh mạng mới, hiệu lực 01/7/2026; yêu cầu baseline an ninh mạng và lưu vết/log - **NĐ 102/2025/NĐ-CP** — 13/5/2025 — bảo vệ, quản trị, xử lý dữ liệu y tế số - **Luật KCB 2023** — hồ sơ bệnh án và trách nhiệm cơ sở KCB. |
|
| experimental | |||
| fhirVersion | 4.0.1 | ||
| jurisdiction | |||
| jurisdiction[0] | urn:iso:std:iso:3166#VN | ||
| kind | resource | ||
| name | VNCoreAuditEvent | ||
| publisher | HL7 Vietnam | ||
| purpose | |||
| status | draft | ||
| title | Nhật ký truy cập dữ liệu VN Core — VN Core AuditEvent Profile | ||
| type | AuditEvent | ||
| url | http://fhir.hl7.org.vn/core/StructureDefinition/vn-core-audit-event | ||
| version | 0.3.0 | 0.4.0 |
|
| Name | L Flags | L Card. | L Type | L Description & Constraints | R Flags | R Card. | R Type | R Description & Constraints | Comments | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
 AuditEvent | 0..* | AuditEvent | Event record kept for security purposes | 0..* | AuditEvent | Event record kept for security purposes | |||||||||||
 id | Σ | 0..1 | id | Logical id of this artifact | Σ | 0..1 | id | Logical id of this artifact | |||||||||
| meta | Σ | 0..1 | Meta | Metadata about the resource | Σ | 0..1 | Meta | Metadata about the resource | |||||||||
| implicitRules | ?!Σ | 0..1 | uri | A set of rules under which this content was created | ?!Σ | 0..1 | uri | A set of rules under which this content was created | |||||||||
| language | 0..1 | code | Language of the resource content Binding: ?? (preferred): A human language.
| 0..1 | code | Language of the resource content Binding: ?? (preferred): A human language.
| |||||||||||
| text | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements | 0..1 | Narrative | Text summary of the resource, for human interpretation This profile does not constrain the narrative in regard to content, language, or traceability to data elements | |||||||||||
| contained | 0..* | Resource | Contained, inline Resources | 0..* | Resource | Contained, inline Resources | |||||||||||
 extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
 modifierExtension | ?! | 0..* | Extension | Extensions that cannot be ignored | ?! | 0..* | Extension | Extensions that cannot be ignored | |||||||||
| type | SΣ | 1..1 | Coding | Loại sự kiện audit Binding: ?? (extensible): Type of event. | SΣ | 1..1 | Coding | Loại sự kiện audit Binding: ?? (extensible): Type of event. | |||||||||
| subtype | SΣ | 0..* | Coding | Phân loại sự kiện audit Binding: ?? (extensible): Sub-type of event. | SΣ | 0..* | Coding | Phân loại sự kiện audit Binding: ?? (extensible): Sub-type of event. | |||||||||
| action | SΣ | 0..1 | code | Hành động thực hiện (C/R/U/D/E) Binding: ?? (required): Indicator for type of action performed during the event that generated the event. | SΣ | 0..1 | code | Hành động thực hiện (C/R/U/D/E) Binding: ?? (required): Indicator for type of action performed during the event that generated the event. | |||||||||
| period | 0..1 | Period | When the activity occurred | 0..1 | Period | When the activity occurred | |||||||||||
| recorded | SΣ | 1..1 | instant | Thời điểm ghi nhận audit | SΣ | 1..1 | instant | Thời điểm ghi nhận audit | |||||||||
| outcome | SΣ | 0..1 | code | Kết quả thực hiện Binding: ?? (required): Indicates whether the event succeeded or failed. | SΣ | 0..1 | code | Kết quả thực hiện Binding: ?? (required): Indicates whether the event succeeded or failed. | |||||||||
| outcomeDesc | Σ | 0..1 | string | Description of the event outcome | Σ | 0..1 | string | Description of the event outcome | |||||||||
| purposeOfEvent | SΣ | 0..* | CodeableConcept | Mục đích xử lý dữ liệu Binding: ?? (extensible) | SΣ | 0..* | CodeableConcept | Mục đích xử lý dữ liệu Binding: ?? (extensible) | |||||||||
 agent | S | 1..* | BackboneElement | Người/hệ thống thực hiện hành động | S | 1..* | BackboneElement | Người/hệ thống thực hiện hành động | |||||||||
 id | 0..1 | string | Unique id for inter-element referencing | 0..1 | string | Unique id for inter-element referencing | |||||||||||
| extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
| modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||||||
| type | 0..1 | CodeableConcept | How agent participated Binding: ?? (extensible): The Participation type of the agent to the event. | 0..1 | CodeableConcept | How agent participated Binding: ?? (extensible): The Participation type of the agent to the event. | |||||||||||
| role | 0..* | CodeableConcept | Agent role in the event Binding: ?? (example): What security role enabled the agent to participate in the event. | 0..* | CodeableConcept | Agent role in the event Binding: ?? (example): What security role enabled the agent to participate in the event. | |||||||||||
| who | SΣ | 0..1 | Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson) | Tác nhân thực hiện | SΣ | 0..1 | Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson) | Tác nhân thực hiện | |||||||||
| altId | 0..1 | string | Alternative User identity | 0..1 | string | Alternative User identity | |||||||||||
| name | 0..1 | string | Human friendly name for the agent | 0..1 | string | Human friendly name for the agent | |||||||||||
| requestor | SΣ | 1..1 | boolean | Có phải tác nhân khởi tạo yêu cầu hay không | SΣ | 1..1 | boolean | Có phải tác nhân khởi tạo yêu cầu hay không | |||||||||
| location | 0..1 | Reference(Location) | Where | 0..1 | Reference(Location) | Where | |||||||||||
| policy | 0..* | uri | Policy that authorized event | 0..* | uri | Policy that authorized event | |||||||||||
| media | 0..1 | Coding | Type of media Binding: ?? (extensible): Used when the event is about exporting/importing onto media. | 0..1 | Coding | Type of media Binding: ?? (extensible): Used when the event is about exporting/importing onto media. | |||||||||||
| network | 0..1 | BackboneElement | Thông tin mạng truy cập | 0..1 | BackboneElement | Thông tin mạng truy cập | |||||||||||
| id | 0..1 | string | Unique id for inter-element referencing | 0..1 | string | Unique id for inter-element referencing | |||||||||||
| extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
| modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||||||
| address | 0..1 | string | Identifier for the network access point of the user device | 0..1 | string | Identifier for the network access point of the user device | |||||||||||
| type | 0..1 | code | The type of network access point Binding: ?? (required): The type of network access point of this agent in the audit event. | 0..1 | code | The type of network access point Binding: ?? (required): The type of network access point of this agent in the audit event. | |||||||||||
| purposeOfUse | 0..* | CodeableConcept | Reason given for this user Binding: ?? (extensible): The reason the activity took place. | 0..* | CodeableConcept | Reason given for this user Binding: ?? (extensible): The reason the activity took place. | |||||||||||
| source | S | 1..1 | BackboneElement | Nguồn phát sinh audit | S | 1..1 | BackboneElement | Nguồn phát sinh audit | |||||||||
| id | 0..1 | string | Unique id for inter-element referencing | 0..1 | string | Unique id for inter-element referencing | |||||||||||
| extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
| modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||||||
| site | 0..1 | string | Logical source location within the enterprise | 0..1 | string | Logical source location within the enterprise | |||||||||||
| observer | SΣ | 1..1 | Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson) | Hệ thống/đơn vị ghi log | SΣ | 1..1 | Reference(PractitionerRole | Practitioner | Organization | Device | Patient | RelatedPerson) | Hệ thống/đơn vị ghi log | |||||||||
| type | 0..* | Coding | The type of source where event originated Binding: ?? (extensible): Code specifying the type of system that detected and recorded the event. | 0..* | Coding | The type of source where event originated Binding: ?? (extensible): Code specifying the type of system that detected and recorded the event. | |||||||||||
 entity | SC | 0..* | BackboneElement | Đối tượng dữ liệu bị tác động | SC | 0..* | BackboneElement | Đối tượng dữ liệu bị tác động | |||||||||
 id | 0..1 | string | Unique id for inter-element referencing | 0..1 | string | Unique id for inter-element referencing | |||||||||||
| extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
| modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||||||
| what | SΣ | 0..1 | Reference(Resource) | Resource hoặc đối tượng dữ liệu liên quan | SΣ | 0..1 | Reference(Resource) | Resource hoặc đối tượng dữ liệu liên quan | |||||||||
| type | 0..1 | Coding | Type of entity involved Binding: ?? (extensible): Code for the entity type involved in the audit event. | 0..1 | Coding | Type of entity involved Binding: ?? (extensible): Code for the entity type involved in the audit event. | |||||||||||
| role | 0..1 | Coding | What role the entity played Binding: ?? (extensible): Code representing the role the entity played in the audit event. | 0..1 | Coding | What role the entity played Binding: ?? (extensible): Code representing the role the entity played in the audit event. | |||||||||||
| lifecycle | 0..1 | Coding | Life-cycle stage for the entity Binding: ?? (extensible): Identifier for the data life-cycle stage for the entity. | 0..1 | Coding | Life-cycle stage for the entity Binding: ?? (extensible): Identifier for the data life-cycle stage for the entity. | |||||||||||
| securityLabel | 0..* | Coding | Security labels on the entity Binding: ?? (extensible): Security Labels from the Healthcare Privacy and Security Classification System. | 0..* | Coding | Security labels on the entity Binding: ?? (extensible): Security Labels from the Healthcare Privacy and Security Classification System. | |||||||||||
| name | ΣC | 0..1 | string | Tên đối tượng dữ liệu | ΣC | 0..1 | string | Tên đối tượng dữ liệu | |||||||||
| description | 0..1 | string | Descriptive text | 0..1 | string | Descriptive text | |||||||||||
| query | ΣC | 0..1 | base64Binary | Query parameters | ΣC | 0..1 | base64Binary | Query parameters | |||||||||
| detail | 0..* | BackboneElement | Additional Information about the entity | 0..* | BackboneElement | Additional Information about the entity | |||||||||||
| id | 0..1 | string | Unique id for inter-element referencing | 0..1 | string | Unique id for inter-element referencing | |||||||||||
| extension | 0..* | Extension | Additional content defined by implementations | 0..* | Extension | Additional content defined by implementations | |||||||||||
| modifierExtension | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | ?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized | |||||||||
| type | 1..1 | string | Name of the property | 1..1 | string | Name of the property | |||||||||||
| value[x] | 1..1 | string, base64Binary | Property value | 1..1 | string, base64Binary | Property value | |||||||||||
| Documentation for this format | |||||||||||||||||