Education toolkits for general practice

Introduction to My Health Record in general practice - Chapter 9

Other legal matters

Last revised: 15 May 2020

  • Ensure staff receive initial and ongoing training in the use of My Health Record
  • Create and maintain My Health Record policies for the organisation
  • Take reasonable steps to prevent misuse of/unauthorised access to Healthcare Identifiers with account management measures
  • Do not discriminate against any individual because they do/do not have a My Health Record, or because of the access controls they have set in their My Health Record
  • Take care to ensure information is accurate to the best of your knowledge before uploading it to My Health Record

Acts, Rules and Regulations governing My Health Record

State based legislation

Authority under the law to upload information is subject to two exceptions:

  1. where the healthcare recipient withdraws their consent to the document being uploaded
  2. where the clinical document includes health information subject to certain confidentiality provisions in either the Public Health Acts of NSW, Queensland or the ACT, and the healthcare organisation is subject to the particular Public Health Act.


In NSW, the types of health information are ‘Category 5 medical conditions’, which are AIDS and HIV; as well as health information relating to a cervical cancer test. These Public Health Act confidentiality provisions apply to ‘a medical practitioner’, and could be from either the public or private sector. As such, a healthcare provider in NSW cannot rely on the authority under the law model to upload information relating to AIDS, HIV and/or results of a cervical cancer test, but must request additional consent of the healthcare recipient to upload such health information to My Health Record.


Queensland and ACT

In Queensland and the ACT, the types of health information is much broader, and includes notifiable conditions, contagious conditions, cancer notifications and Pap smear register information. However, these Public Health Act confidentiality provisions apply only to persons who collect the information as part of performing a function under the Act (eg those public sector individuals who maintain a notifiable conditions register). Unless these persons are participants in My Health Record these confidentiality provisions do not seem to apply to providers uploading healthcare information to My Health Record

Relevant RACGP resources
This event attracts CPD points and can be self recorded

Did you know you can now log your CPD with a click of a button?

Create Quick log