---
title: "Consent updated"
method: POST
path: "consent.updated"
---

# Consent updated

`POST consent.updated` (webhook)

Fires when a patient's HIPAA authorization consent is granted or revoked. May not apply to your organization.

## Payload

- object
  - `type` 'consent.updated', required
  - `data` object, required
    - `patient_id` string, uuid, required
    - `policy` 'hipaaAuthorizationConsent', required: The consent policy that changed.
    - `granted` boolean, required: True if the patient granted this consent, false if they revoked it.
  - `id` string, uuid, required
  - `timestamp` string, date-time, required: datetime in ISO 8601 format

## Acknowledgement `200`

Return 200 if the webhook is accepted

## Other responses

- `429`: Return 429 to rate limit the webhook with a retry-after header. Max retry-after is 900 seconds (15 minutes) in the future.

---

[API](https://skmtc.dev/counselhealth/apis/counsel-api.md) - [All operations](https://skmtc.dev/counselhealth/apis/counsel-api/llms.txt) - [OpenAPI document](https://skmtc.dev/counselhealth/apis/counsel-api/revisions/4110a89127e8?raw)