current

SMART Health Cards issued in the United States SHALL NOT have Patient.identifier set as this could include sensitive information such as a Social Security Number or MRN. 

comment

do we know that there is no possibility that policy may change and that the SSN or Drivers-License  becomes mandatory? I think the current recommendation may be mostly right, but sure seems to be too strict. The actual requirement will come from regulated policy, that is independent of this specification.