This is the abstract class from which all concrete policy classes in this policy information model are derived and instantiated. Because this class is abstract, it cannot be instantiated as a security policy for healthcare. However, it specifies the properties reused by all policies. [HL7 DAM] A policy is a “set of legal, political, organizational, functional and technical obligations for communication and cooperation.” Policy governs the behavior of a system. [ISO 22600-2] Policy encompasses jurisdictional, organizational, and Subject of Care (patient) policies. Organization and jurisdictional polices are instantiated as Basic Policy in both the security policy and privacy policy contexts. Basic Policy is discussed further later in this document. It should also be noted that privacy policy is controlled by the Subject of Care. This class is derived from ISO 22600-2 and HL7 DAM. "The references to the policies that are included in this consent scope. Policies may be organizational, but are often defined jurisdictionally, or in law." - HL7 FHIR, Consent.policy