{"version":"0.38.0","built_at":"2026-10-24T19:53:00.313Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-1880.20.20","name":"Third-Party Request Review","level":3,"parent_id":"BC-1880.20","l1_id":"BC-1880","industry":"healthcare","macro_id":null,"path":["Health Information","Release of Information","Third-Party Request Review"],"description":"Check that each third-party request carries a valid authorization or legal basis, and release only the minimum information it allows.","aliases":["Authorization Validation","Minimum Necessary Review"],"in_scope":[],"out_of_scope":[],"csdm_note":null,"status":"active","successor_id":null,"child_ids":[]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[],"stacks":[],"books":[],"technology":[],"frameworks":[{"id":"FW-490","name":"HIPAA","kind":"Standard","via":"BC-1880.20"}],"principles":[],"data_concepts":[],"domain_events":[]},"ancestors":[{"id":"BC-1880","name":"Health Information","level":1},{"id":"BC-1880.20","name":"Release of Information","level":2}],"children":[]}