Consent

Consent is a record where an individual authorizes a legal entity to access, use, or disclose PII and under what conditions that is allowed.

Consent can also be implicit. HIPAA includes several scenarios. If Consent is implicit, there won’t be a Consent Record.

Also in scenarios where an explicit Consent is required, there is the possibility that the Consent Record doesn’t exist yet because it is delayed, for example in case of emergencies.

InOpen Ecosystem Consent is integrated with ZTA in the foundations of the platform: not only is every request Authenticated and Authorized, if the request is to access data ZTA will also check if a Consent Record exists that allows access to that data.