{'fraction_non_alphanumeric': 0.02280790674100355, 'fraction_numerical': 0.007602635580334516, 'mean_word_length': 5.388349514563107, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Building Health Policy Enforcement Solution Based on HL7 FHIR

Health data management is in the process of standardization. Health Level Seven International (HL7) is an ANSI-accredited organization with a mission to provide frameworks and standards for the exchange, integration, sharing, and retrieval of electronic health information. The vision of HL71 is a world in which everyone can securely access and use the right health data when and where they need it. In March 20202, the Office of the National Coordinator for Health Information Technology (ONC) and the Centers for Medicare and Medicaid Services published interoperability regulation focused on key provisions of the 21st Century Cures Act3 that governs use and exchange of electronic health information. ONC’s standardization effort is based on HL7’s Fast Healthcare Interoperability Resources (FHIR) standard, Release 44. Avoidance of data leakage and cyber threats are the key aspects of health data management. The focus of our work is to design a Health Policy Enforcement Solution (HPES) that can be used as part of an FHIR-based interoperability platform and seamlessly inserted between an FHIR database and any application that provides an FHIR-based API. The purpose of the HPES is to ensure that legal requirements regarding sensitive personal information are accounted for every time a patient’s data is returned upon request of the patient or their personal representative. The rules regulating access to health data can be based on various criteria: legislative and policy documents of various jurisdictions, patient and disease data, patient’s acts of consent, attribution data (relation of the patient to the entity requesting the data), etc. Some rules may supersede other rules in different settings. With a variety of health industry players involved, including insurance companies, medical service providers, clinicians, researchers, labs, etc., the market value of such an interoperability