Request context fitness for audit requirements

tewhatuora / schemas

Public repository for schema documents (usually referenced by OAS specifications)

Apache License 2.0

0 stars 1 forks source link

Request context fitness for audit requirements #5

Closed l5 closed 2 months ago

l5 commented 2 months ago

Made purpose of use a list so multiple values can be accepted.
Added user full name as a required field, as some users may not have a CPN
Added organisation id as a required field, according to privacy requirements
Added facility id as a required field, according to privacy requirements
Added end consumer IP address as a field; while not technically marked as "required", this must be submitted if no exemption was granted during onboarding.

l5 commented 2 months ago

Update: The IP Address field in the suggested new version might need to be removed, as decision CP031 indicates that it is not required. However, as of today, CP031 has not been confirmed by all decision makers yet.