The following scenario is based on a question asked on John Moehrke's blog in the Consent given to authorized representative

This is a case where a Patient is giving a limited (read-only) access to an individual.

Patient "P. van de Heuvel" wishes to provide XXX with read-only access to the data at Good Health Psychiatric Hospital available for patient requested access use.

<!-- likely use url pointer to common text --> </sourceAttachment> <!-- this is opt-out - e.g. nothing approved unless otherwise stated --> <policy value="http://hl7.org/fhir/ConsentPolicy/opt-in"/> <except> <type value="permit"/> <actor> <role> <coding> <system value="http://hl7.org/fhir/v3/ParticipationType"/> <code value="CST"/> </coding> </role> <reference> <reference value="Organization/2.16.840.1.113883.19.6"/> <display value="Good Health Psychiatric Hospital"/> </reference> </actor> <actor> <role> <coding> <system value="http://hl7.org/fhir/v3/ParticipationType"/> <code value="PRCP"/> </coding> </role> <reference> <reference value="Patient/example"/> <display value="Good Health Clinic"/> </reference> </actor> <action> <coding> <system value="http://hl7.org/fhir/consentaction"/> <code value="access"/> </coding> </action> </except> </Consent>