Relying party · Health
Agents in healthcare
An agent passes patient data to a referring physician. Was a valid consent in place — and who proves that in three years?
The patient's consent is not bound to any form. Disclosure WITHOUT it is a crime: Art. 321 of the Swiss Criminal Code, up to three years' imprisonment. An agent cannot judge whether a consent is valid — that presupposes capacity and informed explanation. Mandact therefore lists `patientdata.disclose` as prepare_only: the agent prepares, a human releases.
Use cases
Data release with a receipt
Every disclosure produces a signed record of who released it — not just that it happened.
Prescriptions stay sealed
`prescription.issue` is forbidden (MD-405). The physician's reserved act cannot be contracted away by any mandate.
Deletion requests, traceable
Art. 17 GDPR: the execution sits in the evidence chain, with time and scope.
ROI argument
A single documented release path replaces the evidentiary crisis in a supervisory proceeding.
Action catalogue: patientdata.disclose, prescription.issue — with the legal basis.