Composite Policy class is the integration point between Security and Privacy perspectives. It contains a set of basic policies that work together to enforce a privacy policy, organizational standard operating procedure, or a privacy consent directive. Its basic characteristic is that it contains other policies. An instance of a Composite Policy may include several Authorization, Delegation, Refrain, or Obligation policies. A Composite Policy is specialization of the abstract Policy class and inherits all its attributes and associations. In addition to the attributes it inherits from its base class (“Policy”), this type of class contains additional associations and attributes. [HL7 DAM] This class is derived from ISO 22600-2 and HL7 DAM.