{
  "resourceType" : "CodeSystem",
  "id" : "koppeltaal-security-label",
  "meta" : {
    "profile" : ["http://hl7.org/fhir/StructureDefinition/CodeSystem"]
  },
  "language" : "nl-NL",
  "text" : {
    "status" : "generated",
    "div" : "<div xml:lang=\"nl-NL\" xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"nl-NL\"><p class=\"res-header-id\"><b>Generated Narrative: CodeSystem koppeltaal-security-label</b></p><a name=\"koppeltaal-security-label\"> </a><a name=\"hckoppeltaal-security-label\"> </a><div style=\"display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%\"><p style=\"margin-bottom: 0px\">Language: nl-NL</p><p style=\"margin-bottom: 0px\">Profile: <a href=\"http://hl7.org/fhir/R4/codesystem.html\">CodeSystem</a></p></div><p>This case-sensitive code system <code>http://vzvz.nl/fhir/CodeSystem/koppeltaal-security-label</code> defines the following code:</p><table class=\"codes\"><tr><td style=\"white-space:nowrap\"><b>Code</b></td><td><b>Display</b></td><td><b>Definition</b></td></tr><tr><td style=\"white-space:nowrap\">kt2-delete-flow<a name=\"koppeltaal-security-label-kt2-delete-flow\"> </a></td><td>KT2 delete flow</td><td>Marks a server-owned resource of the patient-data deletion flow: the delete-pending Task and the deletion lifecycle AuditEvents. The Koppeltaal service interprets this label as an additive grant on top of the authorization matrix — domain-wide read, owner-scoped status writes on the Task. See the page Opschoning Patient-data.</td></tr></table></div>"
  },
  "url" : "http://vzvz.nl/fhir/CodeSystem/koppeltaal-security-label",
  "identifier" : [{
    "use" : "official",
    "value" : "http://vzvz.nl/fhir/CodeSystem/koppeltaal-security-label"
  }],
  "version" : "0.16.5",
  "name" : "KoppeltaalSecurityLabel",
  "title" : "Koppeltaal Security Label",
  "status" : "active",
  "experimental" : false,
  "date" : "2026-07-09T12:00:00+02:00",
  "publisher" : "VZVZ",
  "contact" : [{
    "name" : "VZVZ",
    "telecom" : [{
      "system" : "email",
      "value" : "standaardisatie@vzvz.nl",
      "use" : "work"
    }]
  }],
  "description" : "Server-owned security labels (`meta.security`) specific to Koppeltaal. Only the Koppeltaal service assigns these labels; labels supplied by client applications are rejected. The Koppeltaal service interprets them as access-policy markers on top of the TOP-KT-005 authorization matrix.",
  "jurisdiction" : [{
    "coding" : [{
      "system" : "urn:iso:std:iso:3166",
      "code" : "NL",
      "display" : "Netherlands"
    }]
  }],
  "copyright" : "VZVZ",
  "caseSensitive" : true,
  "content" : "complete",
  "count" : 1,
  "concept" : [{
    "code" : "kt2-delete-flow",
    "display" : "KT2 delete flow",
    "definition" : "Marks a server-owned resource of the patient-data deletion flow: the delete-pending Task and the deletion lifecycle AuditEvents. The Koppeltaal service interprets this label as an additive grant on top of the authorization matrix — domain-wide read, owner-scoped status writes on the Task. See the page Opschoning Patient-data."
  }]
}