Merge pull request #154

3 files changed, 622 insertions, 70 deletions

diff --git a/src/test/java/dev/dnpm/etl/processor/consent/GicsConsentServiceTest.java b/src/test/java/dev/dnpm/etl/processor/consent/GicsConsentServiceTest.java
index 6fa8f08..02b4d37 100644
--- a/src/test/java/dev/dnpm/etl/processor/consent/GicsConsentServiceTest.java
+++ b/src/test/java/dev/dnpm/etl/processor/consent/GicsConsentServiceTest.java
@@ -1,9 +1,11 @@
 package dev.dnpm.etl.processor.consent;
 
+import ca.uhn.fhir.context.FhirContext;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import dev.dnpm.etl.processor.config.AppConfiguration;
 import dev.dnpm.etl.processor.config.AppFhirConfig;
 import dev.dnpm.etl.processor.config.GIcsConfigProperties;
+import org.apache.commons.io.IOUtils;
 import org.hl7.fhir.r4.model.*;
 import org.hl7.fhir.r4.model.OperationOutcome.IssueSeverity;
 import org.hl7.fhir.r4.model.OperationOutcome.IssueType;
@@ -20,18 +22,21 @@ import org.springframework.test.context.TestPropertySource;
 import org.springframework.test.web.client.MockRestServiceServer;
 import org.springframework.web.client.RestTemplate;
 
+import java.nio.charset.StandardCharsets;
 import java.time.Instant;
 import java.util.Date;
+import java.util.Objects;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.fail;
 import static org.springframework.test.web.client.match.MockRestRequestMatchers.requestTo;
 import static org.springframework.test.web.client.response.MockRestResponseCreators.withServerError;
 import static org.springframework.test.web.client.response.MockRestResponseCreators.withSuccess;
 
 @ContextConfiguration(classes = {AppConfiguration.class, ObjectMapper.class})
 @TestPropertySource(properties = {
-    "app.consent.service=gics",
-    "app.consent.gics.uri=http://localhost:8090/ttp-fhir/fhir/gics"
+        "app.consent.service=gics",
+        "app.consent.gics.uri=http://localhost:8090/ttp-fhir/fhir/gics"
 })
 @RestClientTest
 class GicsConsentServiceTest {
@@ -46,8 +51,8 @@ class GicsConsentServiceTest {
 
     @BeforeEach
     void setUp(
-        @Autowired AppFhirConfig appFhirConfig,
-        @Autowired GIcsConfigProperties gIcsConfigProperties
+            @Autowired AppFhirConfig appFhirConfig,
+            @Autowired GIcsConfigProperties gIcsConfigProperties
     ) {
         this.appFhirConfig = appFhirConfig;
         this.gIcsConfigProperties = gIcsConfigProperties;
@@ -56,33 +61,33 @@ class GicsConsentServiceTest {
 
         this.mockRestServiceServer = MockRestServiceServer.createServer(restTemplate);
         this.gicsConsentService = new GicsConsentService(
-            this.gIcsConfigProperties,
-            RetryTemplate.builder().maxAttempts(1).build(),
-            restTemplate,
-            this.appFhirConfig
+                this.gIcsConfigProperties,
+                RetryTemplate.builder().maxAttempts(1).build(),
+                restTemplate,
+                this.appFhirConfig
         );
     }
 
     @Test
     void shouldReturnTtpBroadConsentStatus() {
         final Parameters consentedResponse = new Parameters()
-            .addParameter(
-                new ParametersParameterComponent()
-                    .setName("consented")
-                    .setValue(new BooleanType().setValue(true))
-            );
+                .addParameter(
+                        new ParametersParameterComponent()
+                                .setName("consented")
+                                .setValue(new BooleanType().setValue(true))
+                );
 
         mockRestServiceServer
-            .expect(
-                requestTo(
-                    "http://localhost:8090/ttp-fhir/fhir/gics" + GicsConsentService.IS_CONSENTED_ENDPOINT)
-            )
-            .andRespond(
-                withSuccess(
-                    appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(consentedResponse),
-                    MediaType.APPLICATION_JSON
+                .expect(
+                        requestTo(
+                                "http://localhost:8090/ttp-fhir/fhir/gics" + GicsConsentService.IS_CONSENTED_ENDPOINT)
                 )
-            );
+                .andRespond(
+                        withSuccess(
+                                appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(consentedResponse),
+                                MediaType.APPLICATION_JSON
+                        )
+                );
 
         var consentStatus = gicsConsentService.getTtpBroadConsentStatus("123456");
         assertThat(consentStatus).isEqualTo(TtpConsentStatus.BROAD_CONSENT_GIVEN);
@@ -91,22 +96,22 @@ class GicsConsentServiceTest {
     @Test
     void shouldReturnRevokedConsent() {
         final Parameters revokedResponse = new Parameters()
-            .addParameter(
-                new ParametersParameterComponent()
-                    .setName("consented")
-                    .setValue(new BooleanType().setValue(false))
-            );
+                .addParameter(
+                        new ParametersParameterComponent()
+                                .setName("consented")
+                                .setValue(new BooleanType().setValue(false))
+                );
 
         mockRestServiceServer
-            .expect(
-                requestTo(
-                    "http://localhost:8090/ttp-fhir/fhir/gics" + GicsConsentService.IS_CONSENTED_ENDPOINT)
-            )
-            .andRespond(
-                withSuccess(
-                    appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(revokedResponse),
-                    MediaType.APPLICATION_JSON)
-            );
+                .expect(
+                        requestTo(
+                                "http://localhost:8090/ttp-fhir/fhir/gics" + GicsConsentService.IS_CONSENTED_ENDPOINT)
+                )
+                .andRespond(
+                        withSuccess(
+                                appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(revokedResponse),
+                                MediaType.APPLICATION_JSON)
+                );
 
         var consentStatus = gicsConsentService.getTtpBroadConsentStatus("123456");
         assertThat(consentStatus).isEqualTo(TtpConsentStatus.BROAD_CONSENT_MISSING_OR_REJECTED);
@@ -116,23 +121,23 @@ class GicsConsentServiceTest {
     @Test
     void shouldReturnInvalidParameterResponse() {
         final OperationOutcome responseWithErrorOutcome = new OperationOutcome()
-            .addIssue(
-                new OperationOutcomeIssueComponent()
-                    .setSeverity(IssueSeverity.ERROR)
-                    .setCode(IssueType.PROCESSING)
-                    .setDiagnostics("Invalid policy parameter...")
-            );
+                .addIssue(
+                        new OperationOutcomeIssueComponent()
+                                .setSeverity(IssueSeverity.ERROR)
+                                .setCode(IssueType.PROCESSING)
+                                .setDiagnostics("Invalid policy parameter...")
+                );
 
         mockRestServiceServer
-            .expect(
-                requestTo(GICS_BASE_URI + GicsConsentService.IS_CONSENTED_ENDPOINT)
-            )
-            .andRespond(
-                withSuccess(
-                    appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(responseWithErrorOutcome),
-                    MediaType.APPLICATION_JSON
+                .expect(
+                        requestTo(GICS_BASE_URI + GicsConsentService.IS_CONSENTED_ENDPOINT)
                 )
-            );
+                .andRespond(
+                        withSuccess(
+                                appFhirConfig.fhirContext().newJsonParser().encodeResourceToString(responseWithErrorOutcome),
+                                MediaType.APPLICATION_JSON
+                        )
+                );
 
         var consentStatus = gicsConsentService.getTtpBroadConsentStatus("123456");
         assertThat(consentStatus).isEqualTo(TtpConsentStatus.FAILED_TO_ASK);
@@ -141,12 +146,12 @@ class GicsConsentServiceTest {
     @Test
     void shouldReturnRequestError() {
         mockRestServiceServer
-            .expect(
-                requestTo(GICS_BASE_URI + GicsConsentService.IS_CONSENTED_ENDPOINT)
-            )
-            .andRespond(
-                withServerError()
-            );
+                .expect(
+                        requestTo(GICS_BASE_URI + GicsConsentService.IS_CONSENTED_ENDPOINT)
+                )
+                .andRespond(
+                        withServerError()
+                );
 
         var consentStatus = gicsConsentService.getTtpBroadConsentStatus("123456");
         assertThat(consentStatus).isEqualTo(TtpConsentStatus.FAILED_TO_ASK);
@@ -156,26 +161,60 @@ class GicsConsentServiceTest {
     void buildRequestParameterCurrentPolicyStatesForPersonTest() {
         String pid = "12345678";
         var result = gicsConsentService
-            .buildRequestParameterCurrentPolicyStatesForPerson(
-                pid,
-                Date.from(Instant.now()),
-                ConsentDomain.MODELLVORHABEN_64E
-            );
+                .buildRequestParameterCurrentPolicyStatesForPerson(
+                        pid,
+                        Date.from(Instant.now()),
+                        ConsentDomain.MODELLVORHABEN_64E
+                );
 
         assertThat(result.getParameter())
-            .as("should contain 3 parameter resources")
-            .hasSize(3);
+                .as("should contain 3 parameter resources")
+                .hasSize(3);
 
         assertThat(((StringType) result.getParameter("domain").getValue()).getValue())
-            .isEqualTo(
-                gIcsConfigProperties.getGenomDeConsentDomainName()
-            );
+                .isEqualTo(
+                        gIcsConfigProperties.getGenomDeConsentDomainName()
+                );
 
         assertThat(((Identifier) result.getParameter("personIdentifier").getValue()).getValue())
-            .isEqualTo(
-                pid
-            );
+                .isEqualTo(
+                        pid
+                );
+    }
+
+    @Test
+    void convertGicsResultToMiiBroadConsent() throws Exception {
+        var fhirJsonParser = FhirContext.forR4().newJsonParser();
+        fhirJsonParser.setPrettyPrint(true);
+
+        var gicsInputStream = Objects.requireNonNull(
+                this.getClass().getClassLoader().getResourceAsStream("fake_broadConsent_gics_response_permit.json")
+        );
+        var gicsConsentBundle = (Bundle) fhirJsonParser.parseResource(IOUtils.toString(gicsInputStream, StandardCharsets.UTF_8));
+
+        var miiInputStream = Objects.requireNonNull(
+                this.getClass().getClassLoader().getResourceAsStream("fake_broadConsent_mii_response_permit.json")
+        );
+        var miiConsent = IOUtils.toString(miiInputStream, StandardCharsets.UTF_8);
+
+        var actual = gicsConsentService.convertGicsResultToMiiBroadConsent(gicsConsentBundle);
+
+        assertThat(fhirJsonParser.encodeToString(actual)).isEqualTo(miiConsent);
     }
 
+    @Test
+    void convertedMiiBroadConsentShouldNotContainPatientId() throws Exception {
+        var fhirJsonParser = FhirContext.forR4().newJsonParser();
+        fhirJsonParser.setPrettyPrint(true);
+
+        var miiInputStream = Objects.requireNonNull(
+                this.getClass().getClassLoader().getResourceAsStream("fake_broadConsent_mii_response_permit.json")
+        );
+        var miiConsentBundle = (Bundle) fhirJsonParser.parseResource(IOUtils.toString(miiInputStream, StandardCharsets.UTF_8));
+
+        var currentPatientId = miiConsentBundle.getEntry().getFirst().getResource().getIdPart();
 
+        var actual = gicsConsentService.anonymizeBroadConsent(miiConsentBundle);
+        assertThat(fhirJsonParser.encodeToString(actual)).doesNotContain(currentPatientId);
+    }
 }
diff --git a/src/test/kotlin/dev/dnpm/etl/processor/services/ConsentProcessorTest.kt b/src/test/kotlin/dev/dnpm/etl/processor/services/ConsentProcessorTest.kt
index 4d414c5..bbc8b1a 100644
--- a/src/test/kotlin/dev/dnpm/etl/processor/services/ConsentProcessorTest.kt
+++ b/src/test/kotlin/dev/dnpm/etl/processor/services/ConsentProcessorTest.kt
@@ -80,7 +80,7 @@ class ConsentProcessorTest {
         val checkResult = consentProcessor.consentGatedCheckAndTryEmbedding(inputMtb)
 
         assertThat(checkResult).isTrue
-        assertThat(inputMtb.metadata.researchConsents).hasSize(26)
+        assertThat(inputMtb.metadata.researchConsents).isNotEmpty
     }
 
     companion object {
diff --git a/src/test/resources/fake_broadConsent_mii_response_permit.json b/src/test/resources/fake_broadConsent_mii_response_permit.json
new file mode 100644
index 0000000..e7bea5a
--- /dev/null
+++ b/src/test/resources/fake_broadConsent_mii_response_permit.json
@@ -0,0 +1,513 @@
+{
+  "resourceType": "Bundle",
+  "type": "collection",
+  "total": 26,
+  "entry": [ {
+    "fullUrl": "http://localhost:8080/ttp-fhir/fhir/gics/Consent/7d3456c2-79b1-11f0-ab27-6ed0ed82d0fd",
+    "resource": {
+      "resourceType": "Consent",
+      "id": "7d3456c2-79b1-11f0-ab27-6ed0ed82d0fd",
+      "meta": {
+        "lastUpdated": "2025-08-15T11:13:59.143+02:00",
+        "profile": [ "http://fhir.de/ConsentManagement/StructureDefinition/Consent", "https://www.medizininformatik-initiative.de/fhir/modul-consent/StructureDefinition/mii-pr-consent-einwilligung" ]
+      },
+      "extension": [ {
+        "url": "http://fhir.de/ConsentManagement/StructureDefinition/DomainReference",
+        "extension": [ {
+          "url": "domain",
+          "valueReference": {
+            "reference": "ResearchStudy/3c3ffec5-79b1-11f0-ab27-6ed0ed82d0fd"
+          }
+        }, {
+          "url": "status",
+          "valueCoding": {
+            "system": "http://hl7.org/fhir/publication-status",
+            "code": "active"
+          }
+        } ]
+      } ],
+      "status": "active",
+      "scope": {
+        "coding": [ {
+          "system": "http://terminology.hl7.org/CodeSystem/consentscope",
+          "code": "research"
+        } ]
+      },
+      "category": [ {
+        "coding": [ {
+          "system": "http://loinc.org",
+          "code": "57016-8"
+        } ]
+      }, {
+        "coding": [ {
+          "system": "http://fhir.de/ConsentManagement/CodeSystem/ResultType",
+          "code": "policy"
+        } ]
+      } ],
+      "patient": {
+        "reference": "Patient/7d2da57f-79b1-11f0-ab27-6ed0ed82d0fd",
+        "display": "Patienten-ID 644bae7a-56f6-4ee8-b02f-c532e65af5b1"
+      },
+      "dateTime": "2025-08-15T00:00:00+02:00",
+      "organization": [ {
+        "display": "MII"
+      } ],
+      "sourceReference": {
+        "reference": "QuestionnaireResponse/7d314bc5-79b1-11f0-ab27-6ed0ed82d0fd"
+      },
+      "policy": [ {
+        "uri": "urn:oid:2.16.840.1.113883.3.1937.777.24.2.1791"
+      } ],
+      "provision": {
+        "type": "deny",
+        "period": {
+          "start": "2025-08-15T00:00:00+02:00",
+          "end": "2055-08-15T00:00:00+02:00"
+        },
+        "provision": [ {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "IDAT_erheben",
+              "display": "Erfassung neuer identifizierender Daten (IDAT)"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.2",
+              "display": "IDAT erheben"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_retro_speichern_verarbeiten",
+              "display": "Retrospektive Krankenkassendaten (KKDAT) aus fünf Jahren vor Einwilligung speichern und codiert verarbeiten zu Zwecken med. Forschung in der verantwortlichen Stelle"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.12",
+              "display": "KKDAT 5J retrospektiv speichern verarbeiten"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "BIOMAT_wissenschaftlich_nutzen_EU_DSGVO_konform",
+              "display": "Bereitstellung umcodierter Biomaterialien (BIOMAT)  für wissenschaftliche Nutzung  und Analysen zu Zwecken med. Forschung an ext. Forscher"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.22",
+              "display": "BIOMAT wissenschaftlich nutzen EU DSGVO NIVEAU"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_retro_wissenschaftlich_nutzen",
+              "display": "Bereitstellung umcodierter retrospektiver Krankenkassendaten (KKDAT) für wissenschaftliche Nutzung zu Zwecken med. Forschung an externe Forscher"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.13",
+              "display": "KKDAT 5J retrospektiv wissenschaftlich nutzen"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "BIOMAT_Analysedaten_zusammenfuehren_Dritte",
+              "display": "Zusammenführen von auf Biomaterialien (BIOMAT) basierenden Analysedaten mit Analysedaten Dritter, sofern dort ebenfalls eine Einwilligung vorliegt"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.23",
+              "display": "BIOMAT Analysedaten zusammenfuehren Dritte"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "Rekontaktierung_Zusatzbefund",
+              "display": "Rekontaktierung bezüglich Zusatzbefund im Rahmen der am Standort dafür entwickelten Prozesse und der im Nutzungsantrag angegebenen Bedingungen"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.31",
+              "display": "Rekontaktierung Zusatzbefund"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_pro_wissenschaftlich_nutzen",
+              "display": "Bereitstellung umcodierter prospektiver Krankenkassendaten (KKDAT) aus fünf Jahren ab Einwilligung zu Zwecken med. Forschung an ext. Forscher"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.17",
+              "display": "KKDAT 5J prospektiv wissenschaftlich nutzen"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "BIOMAT_lagern_verarbeiten",
+              "display": "Lagerung und Verarbeitung von Biomaterialien innerhalb der verantwortlichen Stelle (BIOMAT)"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.20",
+              "display": "BIOMAT lagern verarbeiten"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_retro_uebertragen",
+              "display": "Krankenkassendaten (KKDAT) der letzten fünf Kalenderjahre vor Datum Unterschrift übertragen"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.11",
+              "display": "KKDAT 5J retrospektiv uebertragen"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_KVNR_5J_retro_uebertragen",
+              "display": "Erlaubnis zur retrospektiven Übermittlung der KVNr., MII-Pseudonym und Zeitraum Datenübermittlung (von:5 Jahre vor Datum Unterschrift; bis: Datum Unterschrift) an zuständige Stelle"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.38",
+              "display": "KKDAT 5J retrospektiv uebertragen KVNR"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2030-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "MDAT_erheben",
+              "display": "Erfassung medizinischer Daten (MDAT)"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.6",
+              "display": "MDAT erheben"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_pro_speichern_verarbeiten",
+              "display": "Prospektive Krankenkassendaten (KKDAT) aus fünf Jahren ab Einwilligung speichern und codiert verarbeiten zu Zwecken der med. Forschung in der verantwortlichen Stelle"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.16",
+              "display": "KKDAT 5J prospektiv speichern verarbeiten"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "MDAT_wissenschaftlich_nutzen_EU_DSGVO_konform",
+              "display": "Bereitstellung umcodierter medizinischer Daten (MDAT) für wissenschaftliche Nutzung zu Zwecken med. Forschung an externe Forscher"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.8",
+              "display": "MDAT wissenschaftlich nutzen EU DSGVO NIVEAU"
+            } ]
+          } ]
+        }, {
+          "type": "deny",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "Rekontaktierung_Verknuepfung_Datenbanken",
+              "display": "Rekontaktierung zur Verknüpfung von Patientendaten mit Daten anderer Datenbanken"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.27",
+              "display": "Rekontaktierung Verknüpfung Datenbanken"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "Rekontaktierung_weitere_Studien",
+              "display": "Rekontaktierung bezüglich Information zu neuen Forschungsvorhaben oder Studien"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.29",
+              "display": "Rekontaktierung weitere Studien"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "IDAT_bereitstellen_EU_DSGVO_konform",
+              "display": "Herausgabe identifizierender Daten (IDAT) an unabhängige Treuhandstelle zur weiteren Verarbeitung"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.5",
+              "display": "IDAT bereitstellen EU DSGVO NIVEAU"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "IDAT_speichern_verarbeiten",
+              "display": "Speicherung und Verarbeitung identifizierender Daten (IDAT) zu Zwecken med. Forschung in der verantwortlichen Stelle"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.3",
+              "display": "IDAT speichern, verarbeiten"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "MDAT_speichern_verarbeiten",
+              "display": "Speicherung und Verarbeitung von medizinischen codierten Daten zu Zwecken med. Forschung innerhalb der verantwortlichen Stelle (MDAT)"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.7",
+              "display": "MDAT speichern, verarbeiten"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2030-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "BIOMAT_erheben",
+              "display": "Gewinnung von Biomaterialien (BIOMAT)"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.19",
+              "display": "BIOMAT erheben"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "Rekontaktierung_Ergebnisse_erheblicher_Bedeutung",
+              "display": "Rekontaktierung des Betroffenen bei Ergebnissen von erheblicher Bedeutung"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.37",
+              "display": "Rekontaktierung Ergebnisse erheblicher Bedeutung"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2030-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_KVNR_5J_pro_uebertragen",
+              "display": "Erlaubnis zur prospektiven Übermittlung der KVNr., MII-Pseudonym und Zeitraum Datenübermittlung (von: Datum Unterschrift; bis: max. 5 Kalenderjahre nach Unterschrift) an zuständige Stelle"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.39",
+              "display": "KKDAT 5J prospektiv uebertragen KVNR"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2030-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "BIOMAT_Zusatzmengen_entnehmen",
+              "display": "Entnahme zusätzlicher Mengen von Biomaterialien (BIOMAT) in den in der Einwilligung beschriebenen Grenzen"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.25",
+              "display": "BIOMAT Zusatzmengen entnehmen"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "Rekontaktierung_weitere_Erhebung",
+              "display": "Rekontaktierung bezüglich Erhebung zusätzlicher Daten"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.28",
+              "display": "Rekontaktierung weitere Erhebung"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "IDAT_zusammenfuehren_Dritte",
+              "display": "Zusammenführung identifizierender Daten (IDAT) über die unabhängige Treuhandstelle mit Dritten Forschungspartnern, sofern dort eine Einwilligung vorliegt"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.4",
+              "display": "IDAT zusammenfuehren Dritte"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2055-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy",
+              "code": "MDAT_zusammenfuehren_Dritte",
+              "display": "Zusammenführung medizinischer Daten (MDAT) mit Dritten Forschungspartnern, sofern dort eine Einwilligung vorliegt"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.9",
+              "display": "MDAT zusammenfuehren Dritte"
+            } ]
+          } ]
+        }, {
+          "type": "permit",
+          "period": {
+            "start": "2025-08-15T00:00:00+02:00",
+            "end": "2030-08-15T00:00:00+02:00"
+          },
+          "code": [ {
+            "coding": [ {
+              "system": "https://ths-greifswald.de/fhir/CodeSystem/gics/Policy/MII",
+              "code": "KKDAT_5J_pro_uebertragen",
+              "display": "Prospektive Krankenkassendaten (KKDAT) für fünf Kalenderjahre nach Datum Unterschrift übertragen"
+            }, {
+              "system": "urn:oid:2.16.840.1.113883.3.1937.777.24.5.3",
+              "code": "2.16.840.1.113883.3.1937.777.24.5.3.15",
+              "display": "KKDAT 5J prospektiv uebertragen"
+            } ]
+          } ]
+        } ]
+      }
+    }
+  } ]
+}
\ No newline at end of file