<?xml version=“1.0” encoding=“UTF-8”?><AuditEvent xmlns=“hl7.org/fhir”>

<id value="example-disclosure"/>
 <text>
   <status value="generated"/>
   <div xmlns="http://www.w3.org/1999/xhtml">Disclosure by some idiot, for marketing reasons, to places unknown, of a Poor Sap, data about Everthing important.</div>
 </text>    
 <event>
   <type>
       <system value="http://nema.org/dicom/dicm"/>
       <code value="110106"/>
       <display value="Export"/>
   </type>
   <subtype>
         <code value="Disclosure"/>
         <display value="HIPAA disclosure"/>
   </subtype>
   <action value="R"/>
   <dateTime value="2013-09-22T00:08:00Z"/>
   <outcome value="0"/>
       <outcomeDesc value="Successful  Disclosure"/>
       <purposeOfEvent>
               <system value="http://hl7.org/fhir/v3/ActReason"/>
               <code value="HMARKT"/>
               <display value="healthcare marketing"/>
       </purposeOfEvent>
 </event>
 <participant>
 <!--  who disclosed the data  -->
   <role>
     <coding>
       <system value="http://nema.org/dicom/dicm"/>
       <code value="110153"/>
       <display value="Source Role ID"/>
     </coding>
   </role>
   <userId>
               <value value="SomeIdiot@nowhere.com"/>
       </userId>
       <altId value="notMe"/>
       <name value="That guy everyone wishes would be caught"/>
   <requestor value="true"/>
       <location>
               <reference value="Location/1"/>
       </location>
       <policy value="http://consent.com/yes"/>
   <network>
     <address value="custodian.net"/>
     <type value="1"/>
   </network>
   </participant>
 <participant>
 <!--  who received the data  -->
   <role>
     <coding>
       <system value="http://nema.org/dicom/dicm"/>
       <code value="110152"/>
       <display value="Destination Role ID"/>
     </coding>
   </role>
   <reference>
         <reference value="Practitioner/example"/>
       </reference>
   <userId>
               <value value="Where"/>
       </userId>
   <requestor value="false"/>
   <network>
     <address value="marketing.land"/>
     <type value="1"/>
   </network>
       <purposeOfUse>
               <system value="http://hl7.org/fhir/v3/ActReason"/>
               <code value="HMARKT"/>
               <display value="healthcare marketing"/>
       </purposeOfUse>
 </participant>
 <source>
 <!--  what system detected this disclosure  -->
       <site value="Watcher"/>
   <identifier>
               <value value="Watchers Accounting of Disclosures Application"/>
       </identifier>
       <type>
       <system value="http://hl7.org/fhir/security-source-type"/>
       <code value="4"/>
       <display value="Application Server"/>
       </type>
 </source>
 <object>
 <!--  patient whos data got disclosed  -->
   <reference>
         <reference value="Patient/example"/>
       </reference>
       <type>
               <system value="http://hl7.org/fhir/object-type"/>
               <code value="1"/>
               <display value="Person"/>
       </type>
       <role>
               <system value="http://hl7.org/fhir/valueset-object-role"/>
               <code value="1"/>
               <display value="Patient"/>
       </role>
 </object>
 <object>
 <!--  data that got disclosed  -->
   <identifier>
     <value value="What.id"/>
   </identifier>
   <reference>
     <reference value="Patient/example/_history/1"/>
   </reference>
       <type>
               <system value="http://hl7.org/fhir/object-type"/>
               <code value="2"/>
               <display value="System Object"/>
       </type>
       <role>
               <system value="http://hl7.org/fhir/valueset-object-role"/>
               <code value="4"/>
               <display value="DomainResource"/>
       </role>
   <lifecycle>
               <system value="http://hl7.org/fhir/object-lifecycle"/>
               <code value="11"/>
               <display value="Disclosure"/>
       </lifecycle>
       <securityLabel>
                       <system value="http://hl7.org/fhir/v3/Confidentiality"/>
                       <code value="V"/>
                       <display value="very restricted"/>
       </securityLabel>
       <securityLabel>
                       <system value="http://hl7.org/fhir/v3/ActCode"/>
                       <code value="STD"/>
                       <display value="sexually transmitted disease information sensitivity"/>
       </securityLabel>
       <securityLabel>
                       <system value="http://hl7.org/fhir/v3/ActCode"/>
                       <code value="DELAU"/>
                       <display value="delete after use"/>
       </securityLabel>
   <name value="Namne of What"/>
       <description value="data about Everthing important"/>
 </object>

</AuditEvent>