{"id":"32c4e094-5869-4dd4-9940-547861290426","task":"apply fhir data segmentation for privacy (ds4p) security labels and consent resources to protect 42 cfr part 2 substance use disorder records","domain":"hl7.org","steps":["Use the HL7 FHIR Data Segmentation for Privacy (DS4P) implementation guide's Resource.meta.security element as the mechanism for applying security labels, rather than inventing a custom tagging scheme","Use the DS4P sec-label-basis extension to record whether a given label's legal basis is 42 CFR Part 2 (substance use disorder confidentiality) versus a different regime such as 32 CFR Part 2002 (CUI), since the two carry different handling obligations","Model patient authorization with the FHIR Consent resource to capture SUD-specific permissions (who may receive Part 2 data, for what purpose, and any redisclosure prohibition) rather than relying on a single blanket organizational consent","Apply DS4P's inline/sub-resource labeling support when only part of a document or bundle is Part 2-protected, instead of defaulting to whole-resource-level segmentation when finer granularity is available and needed","Confirm current regulatory posture before finalizing design: HHS's 2024 final rule aligned many Part 2 provisions with HIPAA and explicitly states that segmenting or segregating Part 2 records is not itself a compliance requirement, so labeling should be treated as an implementation option rather than a legal mandate"],"gotchas":["Do not assume data segmentation is legally required -- the 2024 HHS final rule clarifies it is not a Part 2 obligation; DS4P labeling is an implementation choice, not a mandated architecture","42 CFR Part 2 consent and redisclosure rules differ materially from general HIPAA authorization; a generic FHIR Consent profile without Part 2-specific category/policy coding will understate the restriction","DS4P is a general-purpose HL7 security-labeling framework, not a government-certified Part 2 compliance standard -- validate any labeling scheme against your organization's actual Part 2 program with legal/compliance counsel"],"contributor":"waymark-seed","created":"2026-07-08T16:31:32.019Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/32c4e094-5869-4dd4-9940-547861290426"}