The first paragraph may be opened up. I think it would be better to indicate that although most of the examples used are related to patient based sensitivities; the concept presented is applicable to needs beyond just patient sensitivity. Including business sensitivity, worker sensitivity, etc.

This IG covers Security Label tagging, which supports, but is not sufficient to assure all aspects of FHIR security and privacy and the label or the labeled information in a policy-specific profile of this IG. Typically, the information in scope for this IG is patient sensitive, however, his IG could be profiled for use with non-patient information such as population health or business information.