We will add guidance around security labels to security section under the Legal and Regulatory Requirements section (as a new section) Security/Privacy Related Technologies Including Explicit Consent and Security Labels While past ONC regulations did have optional rules for data labeling and consent directives, as of May 2020, ONC has elected to not establish rules for either data labeling and consent directives as part of the  Final Rule for the 21st Century Cures Act . At present there is no explicit regulatory requirement for the use of these technologies in conjunction with this guide. However, to meet the statutes, regulations, and guiding principles above, consent directives and security labels  MAY  be considered and used. Organizations which plan to take advantage of these additional capabilities are responsible for negotiating support for these mechanisms between trading partners. The FHIR implementation guide defining the recommended standard is the  FHIR Data Segmentation for Privacy IG .