My Health Records Act 2012 (Cth)

Case
No judgment structure available for this case.

My Health Records Act 2012

No. 63, 2012

Compilation No. 15

Compilation date: 15 February 2025

Includes amendments: Act No. 8, 2025

About this compilation

This compilation

This is a compilation of the My Health Records Act 2012 that shows the text of the law as amended and in force on 15 February 2025 (the compilation date).

The notes at the end of this compilation (the endnotes) include information about amending laws and the amendment history of provisions of the compiled law.

Uncommenced amendments

The effect of uncommenced amendments is not shown in the text of the compiled law. Any uncommenced amendments affecting the law are accessible on the Register ( The details of amendments made up to, but not commenced at, the compilation date are underlined in the endnotes. For more information on any uncommenced amendments, see the Register for the compiled law.

Application, saving and transitional provisions for provisions and amendments

If the operation of a provision or amendment of the compiled law is affected by an application, saving or transitional provision that is not included in this compilation, details are included in the endnotes.

Editorial changes

For more information about any editorial changes made in this compilation, see the endnotes.

Modifications

If the compiled law is modified by another law, the compiled law operates as modified but the modification does not amend the text of the law. Accordingly, this compilation does not show the text of the compiled law as modified. For more information on any modifications, see the Register for the compiled law.

Self‑repealing provisions

If a provision of the compiled law has been repealed in accordance with a provision of the law, details are included in the endnotes.

Contents

An Act to provide for a system of access to electronic health records, and for related purposes

Part 1Preliminary 1Short title

This Act may be cited as the My Health Records Act 2012.

2Commencement
  1. (1)

    Each provision of this Act specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms.

Commencement information

Column 1

Column 2

Column 3

Provision(s)

Commencement

Date/Details

1. Sections 1 and 2 and anything in this Act not elsewhere covered by this table

The day this Act receives the Royal Assent.

26 June 2012

2. Sections 3 to 112

A day or days to be fixed by Proclamation.

However, if any of the provision(s) do not commence by the later of:

(a) 1 July 2012; and

(b) the day this Act receives the Royal Assent;

they commence on the day after the later of those days.

29 June 2012

(see F2012L01395)

Note: This table relates only to the provisions of this Act as originally enacted. It will not be amended to deal with any later amendments of this Act.

  1. (2)

    Any information in column 3 of the table is not part of this Act. Information may be inserted in this column, or information in it may be edited, in any published version of this Act.

3Object of Act

The object of this Act is to enable the establishment and operation of a national public system for the provision of access to health information relating to recipients of healthcare that is voluntary for those recipients, to:

  1. (a)

    help overcome the fragmentation of health information; and

  2. (b)

    improve the availability and quality of health information; and

  3. (c)

    reduce the occurrence of adverse medical events and the duplication of treatment; and

  4. (d)

    improve the coordination and quality of healthcare provided to healthcare recipients by different healthcare providers.

4Simplified outline of this Act

The My Health Record system is a national public system for making health information about a healthcare recipient available for the purposes of providing healthcare to the recipient.

A healthcare recipient will have a My Health Record if the recipient registers in the My Health Record system. The Minister may, however, provide that the opt‑out model is to apply under My Health Records Rules made under Schedule 1. A healthcare recipient covered by those Rules will be registered in the My Health Record system, and have a My Health Record, unless the recipient elects to opt‑out of the system.

The My Health Record system is operated by the System Operator. The System Operator operates the National Repositories Service, that stores key records that form part of a healthcare recipient’s My Health Record. Other records are stored by registered repository operators. Together these records make up a healthcare recipient’s My Health Record.

If a healthcare recipient is registered in the My Health Record system, a healthcare provider may (or, in some circumstances, must) upload health information about the recipient to the My Health Record system, unless the record is one which the healthcare recipient has advised the healthcare provider not to upload or the record is not to be uploaded under prescribed laws of a State or Territory.

Health information may be collected, used and disclosed from a healthcare recipient’s My Health Record for the purpose of providing healthcare to the recipient, subject to any access controls set by the recipient (or if none are set, default access controls). There are other limited circumstances in which health information may be collected, used or disclosed from a My Health Record. Criminal and civil penalties apply if a person collects, uses or discloses information from a My Health Record without authorisation. Enforceable undertakings and injunctions are also available to enforce the provisions of this Act.

An authorisation to collect, use or disclose information under this Act is also an authorisation to do so for the purposes of the Privacy Act 1988. A contravention of this Act is also an interference with privacy for the purposes of the Privacy Act 1988, and so can be investigated under that Act.

4ASchedule 1

Schedule 1 has effect.

Note: Schedule 1 deals with the opt‑out model for registering healthcare recipients in the My Health Record system.

5Definitions

In this Act:

approved form means a form approved by the System Operator, in writing, for the purposes of the provision in which the expression occurs.

approved registered repository operator means a healthcare provider organisation that:

  1. (a)

    is a registered repository operator; and

  2. (b)

    satisfies the requirements (if any) specified in the My Health Records Rules.

Australia, when used in a geographical sense, includes the external Territories.

authorised representative of a healthcare recipient has the meaning given by section 6.

Chief Executive Medicare has the same meaning as in the Human Services (Medicare) Act 1973.

cinematograph film has the same meaning as in the Copyright Act 1968.

civil penalty provision has the same meaning as in the Regulatory Powers Act.

contracted service provider of a healthcare provider organisation means an entity that provides:

  1. (a)

    information technology services relating to the My Health Record system; or

  2. (b)

    health information management services relating to the My Health Record system;

to the healthcare provider organisation under a contract with the healthcare provider organisation.

data custodian means the Australian Institute of Health and Welfare.

date of birth accuracy indicator means a data element that is used to indicate how accurate a recorded date of birth is.

date of death accuracy indicator means a data element that is used to indicate how accurate a recorded date of death is.

Defence Department means the Department that:

  1. (a)

    deals with matters arising under section 1 of the Defence Act 1903; and

  2. (b)

    is administered by the Minister who administers that section.

designated privacy law means a law determined under section 110 to be a designated privacy law.

employee of an entity includes the following:

  1. (a)

    an individual who provides services for the entity under a contract for services;

  2. (b)

    an individual whose services are made available to the entity (including services made available free of charge).

entity means:

  1. (a)

    a person; or

  2. (b)

    a partnership; or

  3. (c)

    any other unincorporated association or body; or

  4. (d)

    a trust; or

  5. (e)

    a part of an entity (under a previous application of this definition).

finally determined: see section 10C.

genetic relative of an individual(the first individual) means another individual who is related to the first individual by blood, including a sibling, a parent or a descendant of the first individual.

healthcare means health service within the meaning of subsection 6(1) of the Privacy Act 1988.

healthcare provider means:

  1. (a)

    an individual healthcare provider; or

  2. (b)

    a healthcare provider organisation.

healthcare provider organisation means an entity that has conducted, conducts, or will conduct, an enterprise that provides healthcare (including healthcare provided free of charge).

Note: Because of paragraph (e) of the definition of entity, a healthcare provider organisation could be a part of an entity.

healthcare recipient means an individual who has received, receives, or may receive, healthcare.

healthcare recipient‑only notes, in relation to a healthcare recipient, means health information included by the healthcare recipient in his or her My Health Record and described in the My Health Record system as healthcare recipient‑only notes (whether using that expression or an equivalent expression).

Health Chief Executives Forum means a body (however described) that consists of:

  1. (a)

    the Secretary of the Department; and

  2. (b)

    each head (however described) of the Health Department of a State or Territory.

Health Department of a State or Territory means a Department of state that:

  1. (a)

    deals with matters relating to health; and

  2. (b)

    is administered by the State/Territory Health Minister of the State or Territory.

health information has the meaning given by subsection 6(1) of the Privacy Act 1988.

identifying information has the meaning given by section 9.

index service means the index service maintained by the System Operator for the purposes of the My Health Record system, as mentioned in paragraph 15(a).

individual healthcare provider means an individual who:

  1. (a)

    has provided, provides, or is to provide, healthcare; or

  2. (b)

    is registered by a registration authority as a member of a particular health profession.

Ministerial Council means a body (however described) that consists of the Minister of the Commonwealth, and the Minister of each State and Territory, who is responsible, or principally responsible, for matters relating to health.

My Health Record of a healthcare recipient means the record of information that is created and maintained by the System Operator in relation to the healthcare recipient, and information that can be obtained by means of that record, including the following:

  1. (a)

    information included in the entry in the Register that relates to the healthcare recipient;

  2. (b)

    health information connected in the My Health Record system to the healthcare recipient (including information included in a record accessible through the index service);

  3. (c)

    other information connected in the My Health Record system to the healthcare recipient, such as information relating to auditing access to the record;

  4. (d)

    back‑up records of such information.

My Health Records Rules has the meaning given by section 109.

My Health Record system means a system:

  1. (a)

    that is for:

    1. (i)

      the collection, use and disclosure of information from many sources using telecommunications services and by other means, and the holding of that information, in accordance with the healthcare recipient’s wishes or in circumstances specified in this Act; and

    2. (ii)

      the assembly of that information using telecommunications services and by other means so far is it is relevant to a particular healthcare recipient, so that it can be made available, in accordance with the healthcare recipient’s wishes or in circumstances specified in this Act, to facilitate the provision of healthcare to the healthcare recipient or for purposes specified in this Act; and

  2. (b)

    that involves the performance of functions under this Act by the System Operator.

National Law means:

  1. (a)

    for a State or Territory other than Western Australia—the Health Practitioner Regulation National Law set out in the Schedule to the Health Practitioner Regulation National Law Act 2009 of Queensland, as it applies (with or without modification) as a law of the State or Territory; or

  2. (b)

    for Western Australia—the Health Practitioner Regulation National Law (WA) Act 2010 of Western Australia, so far as that Act corresponds to the Health Practitioner Regulation National Law set out in the Schedule to the Health Practitioner Regulation National Law Act 2009 of Queensland.

National Repositories Service means the service referred to in paragraph 15(i).

nominated healthcare provider: a healthcare provider is the nominated healthcare provider of a healthcare recipient if:

  1. (a)

    an agreement is in force between the healthcare provider and the healthcare recipient that the healthcare provider is the healthcare recipient’s nominated healthcare provider for the purposes of this Act; and

  2. (b)

    a healthcare identifier has been assigned to the healthcare provider under paragraph 9(1)(a) of the Healthcare Identifiers Act 2010; and

  3. (c)

    the healthcare provider is an individual registered by a registration authority as one of the following:

    1. (i)

      a medical practitioner within the meaning of the National Law;

    2. (ii)

      a registered nurse within the meaning of the National Law;

    3. (iii)

      an Aboriginal health practitioner, a Torres Strait Islander health practitioner or an Aboriginal and Torres Strait Islander health practitioner within the meaning of the National Law who is included in a class prescribed by the regulations for the purposes of this subparagraph;

    4. (iv)

      an individual, or an individual included in a class, prescribed by the regulations for the purposes of this subparagraph.

nominated representative of a healthcare recipient has the meaning given by section 7.

parental responsibility: a person has parental responsibility for a healthcare recipient (the child) if, and only if:

  1. (a)

    the person:

    1. (i)

      is the child’s parent (including a person who is presumed to be the child’s parent because of a presumption (other than in section 69Q) in Subdivision D of Division 12 of Part VII of the Family Law Act 1975); and

    2. (ii)

      has not ceased to have parental responsibility for the child because of an order made under the Family Law Act 1975 or a law of a State or Territory; or

  2. (b)

    under a parenting order (within the meaning of the Family Law Act 1975):

    1. (i)

      the child is to live with the person; or

    2. (ii)

      the child is to spend time with the person; or

    3. (iii)

      the person is responsible for the child’s long‑term or day‑to‑day care, welfare and development; or

  3. (c)

    the person is entitled to guardianship or custody of, or access to, the child under a law of the Commonwealth, a State or a Territory.

Note: The presumptions in the Family Law Act 1975 include a presumption arising from a court finding that a person is the child’s parent, and a presumption arising from a man executing an instrument under law acknowledging that he is the father of the child.

participant in the My Health Record system means any of the following:

  1. (a)

    the System Operator;

  2. (b)

    a registered healthcare provider organisation;

  3. (c)

    the operator of the National Repositories Service;

  4. (d)

    a registered repository operator;

  5. (e)

    a registered portal operator;

  6. (f)

    a registered contracted service provider, so far as the contracted service provider provides services to a registered healthcare provider.

personal information has the same meaning as in the Privacy Act 1988.

prescribed healthcare provider organisation means a healthcare provider organisation that is:

  1. (a)

    a corporation to which paragraph 51(xx) of the Constitution applies; and

  2. (b)

    of a kind specified in the My Health Records Rules.

prohibited purpose has the meaning given by section 70A.

record includes a database, register, file or document that contains information in any form (including in electronic form).

Register has the meaning given by section 56.

registered contracted service provider means a contracted service provider that is registered under section 49.

registered healthcare provider organisation means a healthcare provider organisation that is registered under section 44.

registered healthcare recipient means a healthcare recipient who is registered under section 41.

registered portal operator means a person that:

  1. (a)

    is the operator of an electronic interface that facilitates access to the My Health Record system; and

  2. (b)

    is registered as a portal operator under section 49.

registered repository operator means a person that:

  1. (a)

    holds, or can hold, records of information included in My Health Records for the purposes of the My Health Record system; and

  2. (b)

    is registered as a repository operator under section 49.

registration authority means an entity that is responsible under a law for registering members of a particular health profession.

Regulatory Powers Act means the Regulatory Powers (Standard Provisions) Act 2014.

share by default provision: each of the following is a share by default provision:

  1. (a)

    section 41A (prescribed healthcare provider organisations must be registered);

  2. (b)

    section 78A (some information must be shared with the My Health Record system unless exception applies);

  3. (c)

    section 78C (record keeping requirements in relation to sharing information with the My Health Record system);

  4. (d)

    section 78D (prescribed healthcare provider organisations must display notice when not sharing information with the My Health Record system);

  5. (e)

    section 19AD (medicare benefits not payable in respect of certain professional services) of the Health Insurance Act 1973;

  6. (f)

    section 19AF (record keeping requirement) of the Health Insurance Act 1973;

  7. (g)

    section 19AG (advance payment before information is shared with the My Health Record system) of the Health Insurance Act 1973;

  8. (h)

    section 19AH (recovery of payments) of the Health Insurance Act 1973.

shared health summary has the meaning given by section 10.

shares with the My Health Record system: see section 10A.

sound recording has the same meaning as in the Copyright Act 1968.

State or Territory authority has the same meaning as in the Privacy Act 1988.

State/Territory Health Minister means:

  1. (a)

    the Minister of a State; or

  2. (b)

    the Minister of the Australian Capital Territory; or

  3. (c)

    the Minister of the Northern Territory;

who is responsible, or principally responsible, for the administration of matters relating to health in the State or Territory, as the case may be.

System Operator has the meaning given by section 14.

this Act includes:

  1. (a)

    regulations made under this Act; and

  2. (b)

    the My Health Records Rules.

upload exception applies: see section 10B.

use health information included in a healthcare recipient’s My Health Record includes the following:

  1. (a)

    access the information;

  2. (b)

    view the information;

  3. (c)

    modify the information;

  4. (d)

    delete the information.

Veterans’ Affairs Department means the Department that:

  1. (a)

    deals with matters arising under section 1 of the Veterans’ Entitlements Act 1986; and

  2. (b)

    is administered by the Minister who administers that section.

Veterans’ Affairs Department file number means a number allocated to a healthcare recipient by the Veterans’ Affairs Department.

work has the same meaning as in the Copyright Act 1968.

6Definition of authorised representative of a healthcare recipient

Healthcare recipients aged under 14

  1. (1)

    For the purposes of this Act, each person who the System Operator is satisfied has parental responsibility for a healthcare recipient aged under 14 is the authorised representative of the healthcare recipient.

  2. (1A)

    Despite subsection (1), a person who has parental responsibility for a healthcare recipient aged under 18 is not the authorised representative of the healthcare recipient if the System Operator is satisfied that:

    1. (a)

      under a court order or a law of the Commonwealth or a State or Territory, the person must be supervised while spending time with the healthcare recipient; or

    1. (b)

      the life, health or safety of the healthcare recipient or another person would be put at risk if the person were the authorised representative of the healthcare recipient.

  1. (2)

    If there is no person who the System Operator is satisfied has parental responsibility for a healthcare recipient aged under 14, or the only such persons are covered by subsection (1A), the authorised representative of the healthcare recipient is:

    1. (a)

      a person who the System Operator is satisfied is authorised to act on behalf of the healthcare recipient for the purposes of this Act under the law of the Commonwealth or a State or Territory, or a decision of an Australian court or tribunal; or

    2. (b)

      if there is no such person—a person:

      1. (i)

        who the System Operator is satisfied is otherwise an appropriate person to be the authorised representative of the healthcare recipient; or

      2. (ii)

        who is prescribed by the regulations for the purposes of this paragraph.

Healthcare recipients aged between 14 and 17

  1. (3)

    For the purposes of this Act, a person is the authorised representative of a healthcare recipient aged between 14 and 17 years if the healthcare recipient, by written notice given to the System Operator in the approved form, nominates the person to be his or her authorised representative.

Healthcare recipients aged at least 18

  1. (4)

    For the purposes of this Act, if the System Operator is satisfied that a healthcare recipient aged at least 18 is not capable of making decisions for himself or herself, the authorised representative of the healthcare recipient is:

    1. (a)

      a person who the System Operator is satisfied is authorised to act on behalf of the healthcare recipient under the law of the Commonwealth or a State or Territory or a decision of an Australian court or tribunal; or

    2. (b)

      if there is no such person—a person:

      1. (i)

        who the System Operator is satisfied is otherwise an appropriate person to be the authorised representative of the healthcare recipient; or

      2. (ii)

        who is prescribed by the regulations for the purposes of this paragraph.

  2. (5)

    An authorisation referred to in paragraph (2)(a) or (4)(a) may be conferred by specific reference to the purposes of this Act, or conferred by words of general authorisation that are broad enough to cover that purpose.

  3. (6)

    A person cannot be the authorised representative of a healthcare recipient unless:

    1. (a)

      a healthcare identifier has been assigned to the person under paragraph 9(1)(b) of the Healthcare Identifiers Act 2010; or

    (b) the My Health Records Rules provide that a healthcare identifier is not required to have been so assigned.

Effect of being an authorised representative

  1. (7)

    At a time when a healthcare recipient has an authorised representative:

    1. (a)

      the authorised representative is entitled to do any thing that this Act authorises or requires the healthcare recipient to do; and

    2. (b)

      the healthcare recipient is not entitled to do any thing that this Act would, apart from this subsection, authorise or require the healthcare recipient to do; and

    3. (c)

      this Act has effect for all purposes, in relation to a thing done by an authorised representative, as if the healthcare recipient had done the thing.

  2. (8)

    At a time when a healthcare recipient has one or more authorised representatives, any thing that this Act authorises or requires to be done in relation to the healthcare recipient is to be done in relation to at least one of the healthcare recipient’s authorised representatives. This Act has effect for all purposes as if the thing had been done in relation to the healthcare recipient.

7Definition of nominated representative of a healthcare recipient
  1. (1)

    For the purposes of this Act, an individual is the nominated representative of a healthcare recipient if:

    1. (a)

      an agreement is in force between the individual and the healthcare recipient that the individual is the healthcare recipient’s nominated representative for the purposes of this Act; and

    2. (b)

      the healthcare recipient has notified the System Operator that the individual is his or her nominated representative.

Effect of being a nominated representative

  1. (2)

    At a time when a healthcare recipient has a nominated representative:

    1. (a)

      the nominated representative is entitled to do any thing that this Act authorises or requires the healthcare recipient to do, subject to any limitations:

      1. (i)

        to which the healthcare recipient’s agreement is subject; and

      2. (ii)

        that have been notified to the System Operator by the healthcare recipient; and

    2. (b)

      this Act has effect for all purposes, in relation to a thing done by a nominated representative, as if the healthcare recipient had done the thing, subject to any modifications prescribed by the regulations.

    Note: Despite this subsection, a nominated representative must not use information for a prohibited purpose within the meaning of section 70A (even though a healthcare recipient may do so): see subsections 59A(2), 70B(2), 71A(4) and 71B(3).

  2. (3)

    Despite subsection (2), the System Operator must not permit a nominated representative of a healthcare recipient to set access controls in relation to the healthcare recipient’s My Health Record unless:

    1. (a)

      a healthcare identifier has been assigned to the nominated representative under paragraph 9(1)(b) of the Healthcare Identifiers Act 2010; or

    (b) the My Health Records Rules provide that a healthcare identifier is not required to have been so assigned.

  3. (4)

    The fact that a healthcare recipient has a nominated representative does not prevent the healthcare recipient doing any thing that this Act authorises or requires the healthcare recipient to do.

  4. (5)

    At a time when a healthcare recipient has one or more nominated representatives, any thing that this Act authorises or requires to be done in relation to the healthcare recipient may be done in relation to one of the healthcare recipient’s nominated representatives and not in relation to the healthcare recipient to the extent:

    1. (a)

      agreed between the healthcare recipient and the nominated representative; and

    2. (b)

      notified to the System Operator by the healthcare recipient.

This Act has effect for all purposes as if the thing had been done in relation to the healthcare recipient.

7ADuties of authorised representative or nominated representative

Duty to ascertain will and preferences

  1. (1)

    An authorised representative or a nominated representative (a representative) of a healthcare recipient must make reasonable efforts to ascertain the recipient’s will and preferences in relation to the recipient’s My Health Record.

  2. (2)

    If it is not possible to ascertain the healthcare recipient’s will and preferences, the representative must make reasonable efforts to ascertain the recipient’s likely will and preferences in relation to the recipient’s My Health Record.

  3. (3)

    The healthcare recipient’s likely will and preferences may be ascertained from sources including the following:

    1. (a)

      if the representative is a nominated representative—the agreement appointing the representative;

    2. (b)

      to the extent legally possible, from consultation with people who may be expected to be aware of the recipient’s will and preferences.

Duty to give effect to will and preferences

  1. (4)

    The representative must give effect to the healthcare recipient’s will and preferences, or likely will and preferences, ascertained in accordance with subsection (1) or (2).

  2. (5)

    However, if to do so would pose a serious risk to the healthcare recipient’s personal and social wellbeing, the representative must instead act in a manner that promotes the personal and social wellbeing of the healthcare recipient.

Duty if will and preferences cannot be ascertained

  1. (6)

    If the healthcare recipient’s will and preferences, or likely will and preferences, cannot be ascertained, the representative must act in a manner that promotes the personal and social wellbeing of the healthcare recipient.

8Things done etc. under provisions of other Acts
  1. (1)

    A reference in section 6 or 7 to any thing that this Act authorises or requires a healthcare recipient to do is taken to include a reference to any thing that a prescribed provision of another Act authorises or requires a healthcare recipient to do.

  2. (2)

    A reference in section 6 or 7 to any thing that this Act authorises or requires to be done in relation to a healthcare recipient is taken to include a reference to any thing that a prescribed provision of another Act authorises or requires to be done in relation to a healthcare recipient.

9Definition of identifying information
  1. (1)

    Each of the following is identifying information of a healthcare provider who is an individual:

    1. (a)

      the name of the healthcare provider;

    2. (b)

      the address of the healthcare provider;

    3. (c)

      the email address, telephone number and fax number of the healthcare provider;

    4. (d)

      the date of birth, and the date of birth accuracy indicator, of the healthcare provider;

    5. (e)

      the sex of the healthcare provider;

    6. (f)

      the type of healthcare provider that the individual is;

    7. (g)

      if the healthcare provider is registered by a registration authority—the registration authority’s identifier for the healthcare provider and the status of the registration (such as conditional, suspended or cancelled);

    8. (h)

      other information that is prescribed by the regulations for the purpose of this paragraph.

  2. (2)

    Each of the following is identifying information of a healthcare provider that is not an individual:

    1. (a)

      the name of the healthcare provider;

    2. (b)

      the address of the healthcare provider;

    3. (c)

      the email address, telephone number and fax number of the healthcare provider;

    4. (d)

      if applicable, the ABN (within the meaning of the A New Tax System (Australian Business Number) Act 1999) of the healthcare provider;

    5. (e)

      if applicable, the ACN (within the meaning of the Corporations Act 2001) of the healthcare provider;

    6. (f)

      other information that is prescribed by the regulations for the purpose of this paragraph.

  3. (3)

    Each of the following is identifying information of an individual, other than an individual in the capacity of a healthcare provider:

    1. (a)

      if applicable, the Medicare number of the individual;

    2. (b)

      if applicable, the Veterans’ Affairs Department file number of the individual;

    3. (c)

      the name of the individual;

    4. (d)

      the address of the individual;

    5. (e)

      the date of birth, and the date of birth accuracy indicator, of the individual;

    6. (f)

      the sex of the individual;

    7. (g)

      if the individual was part of a multiple birth—the order in which the individual was born;

      Example: The second of twins.

    8. (h)

      if applicable, the date of death, and the date of death accuracy indicator, of the individual;

    9. (i)

      other information that is prescribed by the regulations for the purpose of this paragraph.

10Definition of shared health summary

The shared health summary of a registered healthcare recipient, at a particular time, is a record that:

  1. (a)

    was prepared by the healthcare recipient’s nominated healthcare provider and described by him or her as the healthcare recipient’s shared health summary; and

  2. (b)

    has been uploaded to the National Repositories Service; and

  3. (c)

    at that time, is the most recent such record to have been uploaded to the National Repositories Service.

Note: This means that there is only one shared health summary for a healthcare recipient at a particular time.

10ASharing information with the My Health Record system

  1. (1)

    An entity other than an approved registered repository operator shares with the My Health Record system information if the entity uploads, for the purposes of the My Health Record system, the information to:

    1. (a)

      a repository that forms part of the National Repositories Service; or

    2. (b)

      a repository to which a registered repository operator’s registration relates.

  2. (2)

    An approved registered repository operator shares with the My Health Record system information if the registered repository operator:

    1. (a)

      uploads, for the purposes of the My Health Record system, the information to a repository that forms part of the National Repositories Service; or

    2. (b)

      takes, in relation to the information, the action specified in the My Health Records Rules.

10BWhen an upload exception applies

An upload exception applies in relation to an entity sharing with the My Health Record system information about healthcare provided to an individual if:

  1. (a)

    the individual is not a registered healthcare recipient; or

  2. (b)

    either:

    1. (i)

      the individual, or an authorised representative or nominated representative of the individual, has advised the entity; or

    2. (ii)

      the entity has otherwise been informed that the individual, or an authorised representative or nominated representative of the individual, has advised;

that the information must not be uploaded to the My Health Record system; or

  1. (c)

    an individual healthcare provider reasonably believes that the information should not be shared with the My Health Record system because of a serious concern for the health, safety or wellbeing of the individual; or

  2. (d)

    the information cannot be shared with the My Health Record system due to circumstances beyond the reasonable control of the entity.

10CWhen an application is finally determined

  1. (1)

    An application under section 41B, 42 or 78B is finally determined when the System Operator has made a decision (the original decision) on the application and:

    1. (a)

      the original decision is to approve the application; or

    2. (b)

      no notice of the original decision is given because subsection 97(2A) applies; or

    3. (c)

      no notice asking the System Operator to reconsider the original decision is given within the period mentioned in subsection 97(4); or

    4. (d)

      all of the following apply:

      1. (i)

        a notice asking the System Operator to reconsider the original decision is given within the period mentioned in subsection 97(4);

      2. (ii)

        the System Operator reconsiders the original decision;

      3. (iii)

        no application is made to the Administrative Review Tribunal within the period mentioned in section 18 of the Administrative Review Tribunal Act 2024 for review of the System Operator’s reconsideration decision; or

    5. (e)

      an application is made to the Administrative Review Tribunal within the period mentioned in section 18 of the Administrative Review Tribunal Act 2024 for review of the System Operator’s reconsideration of the original decision, the Administrative Review Tribunal decides the application and one of the following applies:

      1. (i)

        subsection 123(1) of that Act does not apply in relation to the Administrative Review Tribunal’s decision;

      2. (ii)

        no application is made under section 123 of that Act within the period mentioned in section 125 of that Act to refer the Administrative Review Tribunal’s decision to the guidance and appeals panel;

      3. (iii)

        any application that is made under section 123 of that Act within the period mentioned in section 125 of that Act to refer the Administrative Review Tribunal’s decision to the guidance and appeals panel is refused; or

    6. (f)

      both of the following apply:

      1. (i)

        the President of the Administrative Review Tribunal refers the Administrative Review Tribunal’s decision on the application for review of the System Operator’s reconsideration of the original decision to the guidance and appeals panel under section 123 of the Administrative Review Tribunal Act 2024;

      2. (ii)

        the Administrative Review Tribunal makes a decision on the guidance and appeals panel application (within the meaning of the Administrative Review Tribunal Act 2024) taken to be made because of the referral.

  2. (2)

    An application under section 41B or 78B is finally determined when the System Operator ceases to consider the application under subsection 41B(4) or 78B(4).

11Act to bind the Crown
  1. (1)

    This Act binds the Crown in each of its capacities.

  2. (2)

    This Act does not make the Crown liable to be prosecuted for an offence.

    Note: Subsection (2) does not limit other rights and remedies.

12Concurrent operation of State laws

It is the intention of the Parliament that this Act is not to apply to the exclusion of a law of a State or Territory to the extent that that law is capable of operating concurrently with this Act.

13External Territories

This Act extends to every external Territory.

13ASystem Operator may arrange for use of computer programs to make decisions
  1. (1)

    The System Operator may arrange for the use, under the System Operator’s control, of computer programs for any purposes for which the System Operator may make decisions under this Act.

  2. (2)

    A decision made by the operation of a computer program under an arrangement made under subsection (1) is taken to be a decision made by the System Operator.

13BSystem Operator may use electronic communications
  1. (1)

    If under this Act the System Operator is required to give information in writing, that requirement is taken to have been met if the System Operator gives the information by means of an electronic communication, as defined in the Electronic Transactions Act 1999.

  2. (2)

    If under this Act the System Operator is permitted to give information in writing, the System Operator is permitted to give the information by means of an electronic communication, as defined in the Electronic Transactions Act 1999.

Part 2The System Operator and the functions of the Chief Executive MedicareDivision 1System Operator14Identity of the System Operator
  1. (1)

    The System Operator is:

    1. (a)

      the Secretary of the Department; or

    2. (b)

      if a body established by a law of the Commonwealth is prescribed by the regulations to be the System Operator—that body.

  2. (2)

    Before regulations are made for the purposes of paragraph (1)(b), the Minister must be satisfied that the Ministerial Council has been consulted in relation to the proposed regulations.

15Functions of the System Operator

The System Operator has the following functions:

  1. (a)

    to establish and maintain an index service, for the purposes of the My Health Record system, that:

    1. (i)

      allows information in different repositories to be connected to registered healthcare recipients; and

    2. (ii)

      facilitates the retrieval of such information when required, and ensures that registered healthcare recipients, and participants in the My Health Record system who are authorised to collect, use and disclose information, are able to do so readily;

  2. (b)

    to establish and maintain mechanisms (access control mechanisms) that, subject to any requirements specified in the My Health Records Rules:

    1. (i)

      enable each registered healthcare recipient to set controls on the healthcare provider organisations and nominated representatives who may obtain access to the healthcare recipient’s My Health Record; and

    2. (ii)

      specify default access controls that apply if a registered healthcare recipient has not set such controls; and

    3. (iii)

      specify circumstances in which access to a healthcare recipient’s My Health Record is to be automatically suspended or cancelled;

  3. (c)

    without limiting paragraph (b), to ensure that the access control mechanisms enable each registered healthcare recipient to specify that access to a healthcare recipient’s My Health Record is only to be:

    1. (i)

      by healthcare provider organisations and nominated representatives specified by the healthcare recipient; and

    2. (ii)

      in accordance with any limitations specified by the healthcare recipient, including limitations on the kind of health information to be collected, used or disclosed by such healthcare provider organisations and nominated representatives;

  4. (d)

    to establish and maintain a reporting service that allows assessment of the performance of the system against performance indicators;

  5. (e)

    to establish and maintain the Register (see section 56);

  6. (f)

    to register healthcare recipients and participants in the My Health Record system (see Part 3) and to manage and monitor, on an ongoing basis, the system of registration;

  7. (g)

    to establish and maintain an audit service that records activity in respect of information in relation to the My Health Record system;

  8. (h)

    without limiting paragraph (g)—to establish and maintain mechanisms:

    1. (i)

      that enable each registered healthcare recipient to obtain electronic access to a summary of the flows of information in relation to his or her My Health Record; and

    2. (ii)

      that enable each registered healthcare recipient to obtain a complete record of the flows of information in relation to his or her My Health Record, on application to the System Operator;

  9. (i)

    to operate a National Repositories Service that stores key records that form part of a registered healthcare recipient’s My Health Record (including the healthcare recipient’s shared health summary);

  1. (ia)

    to establish and operate a test environment for the My Health Record system, and other electronic systems that interact directly with the My Health Record system, in accordance with the requirements (if any) in the My Health Records Rules;

  2. (j)

    to establish a mechanism for handling complaints about the operation of the My Health Record system;

  3. (k)

    to ensure that the My Health Record system is administered so that problems relating to the administration of the system can be resolved;

  4. (l)

    to advise the Minister on matters relating to the My Health Record system, including in relation to the matters to be included in the My Health Records Rules (see section 109);

  5. (m)

    to educate healthcare recipients, participants in the My Health Record system and members of the public about the My Health Record system;

  6. (ma)

    in accordance with the guidance and direction of the Board established under section 82, to prepare and provide de‑identified data, and, with the consent of the healthcare recipient, health information, for research or public health purposes;

  7. (n)

    such other functions as are conferred on the System Operator by this Act or any other Act;

  8. (o)

    to do anything incidental to or conducive to the performance of any of the above functions.

16Research or public health purposes

The System Operator’s function under paragraph 15(ma) does not include providing de‑identified data or health information to a private health insurer (within the meaning of the Private Health Insurance Act 2007) or any other insurer.

17Retention and destruction of records uploaded to National Repositories Service

Records

  1. (1)

    This section applies to a record if:

    1. (a)

      the record is uploaded to the National Repositories Service; and

    2. (b)

      the record includes health information that is included in the My Health Record of a healthcare recipient.

Retention of records

  1. (2)

    The System Operator must ensure that the record is retained for the period:

    1. (a)

      beginning when the record is first uploaded to the National Repositories Service; and

    2. (b)

      ending:

      1. (i)

        30 years after the death of the healthcare recipient; or

      2. (ii)

        if the System Operator does not know the date of death of the healthcare recipient—130 years after the date of birth of the healthcare recipient; or

      3. (iii)

        if, under subsection (3), the record is required to be destroyed because of the cancellation of registration of the healthcare recipient—when the System Operator is required to destroy the record under subsection (4).

Destruction of records after cancellation on request

  1. (3)

    If the System Operator is required to cancel the registration of the healthcare recipient under subsection 51(1) (cancellation on request), the System Operator must destroy any record that includes health information that is included in the My Health Record of the healthcare recipient, other than the following information:

    1. (a)

      the name and healthcare identifier of the healthcare recipient;

    2. (b)

      the name and healthcare identifier of the person who requested the cancellation, if different from the healthcare recipient;

    3. (c)

      the day the cancellation decision takes effect under subsection 51(7).

  2. (4)

    The System Operator must comply with subsection (3):

    1. (a)

      as soon as practicable after the cancellation decision takes effect under subsection 51(7); or

    2. (b)

      if any of the following requirements apply before the records are destroyed under paragraph (a)—as soon as practicable after the conclusion of the matter to which the requirement relates:

      1. (i)

        a court order requires the System Operator not to destroy records of the healthcare recipient;

      2. (ii)

        the System Operator is required to disclose records of the healthcare recipient under section 69 or 69A;

      3. (iii)

        the System Operator is required to disclose records of the healthcare recipient under a law covered by subsection 65(3).

  3. (5)

    To avoid doubt, if the System Operator is required under subsection (3) to destroy a record that includes health information, the System Operator must also destroy the following:

    1. (a)

      any copy of the record;

    2. (b)

      any previous version of the record;

    3. (c)

      any back‑up version of the record.

Division 4Functions of Chief Executive Medicare38Registered repository operator
  1. (1)

    It is a function of the Chief Executive Medicare to seek to become a registered repository operator and, if registered, to operate a repository for the purposes of the My Health Record system in accordance with subsection (2).

  2. (2)

    Without limiting the way in which the repository is to be operated, at any time when the Chief Executive Medicare is a registered repository operator, the Chief Executive Medicare:

    1. (a)

      may at his or her discretion upload health information held by the Chief Executive Medicare about a registered healthcare recipient to the repository operated by the Chief Executive Medicare; and

    2. (b)

      with the consent of a registered healthcare recipient—may at his or her discretion make available to the System Operator health information held by the Chief Executive Medicare about the healthcare recipient.

    Note: Section 58 authorises the Chief Executive Medicare to disclose identifying information to the System Operator.

  3. (3)

    The health information referred to in subsection (2) in relation to a healthcare recipient may include the name of one or more healthcare providers that have provided healthcare to the healthcare recipient.

Part 3RegistrationDivision 1Registering healthcare recipients

Note: This Division does not apply to a healthcare recipient if the opt‑out model applies to the healthcare recipient because of My Health Records Rules made under Schedule 1 to this Act.

39Healthcare recipients may apply for registration
  1. (1)

    A healthcare recipient may apply to the System Operator for registration of the healthcare recipient.

  2. (2)

    The application must:

    1. (a)

      be in the approved form; and

    2. (b)

      include, or be accompanied by, the information and documents required by the form; and

    3. (c)

      be lodged at a place, or by a means, specified in the form.

40When a healthcare recipient is eligible for registration

A healthcare recipient is eligible for registration if:

  1. (a)

    a healthcare identifier has been assigned to the healthcare recipient under paragraph 9(1)(b) of the Healthcare Identifiers Act 2010; and

  2. (b)

    the following information has been provided to the System Operator in relation to the healthcare recipient:

    1. (i)

      full name;

    2. (ii)

      date of birth;

    3. (iii)

      healthcare identifier, Medicare card number or Department of Veterans’ Affairs file number;

    4. (iv)

      sex;

    5. (v)

      such other information as is prescribed by the regulations.

41Registration of a healthcare recipient by the System Operator
  1. (1)

    The System Operator must decide to register a healthcare recipient if:

    1. (a)

      an application has been made under section 39 in relation to the healthcare recipient; and

    2. (b)

      the healthcare recipient is eligible for registration under section 40; and

    3. (c)

      the System Operator is satisfied, having regard to the matters (if any) specified in the My Health Records Rules, that the identity of the healthcare recipient has been appropriately verified.

    Note: The System Operator is not permitted to register a healthcare recipient in any other circumstances.

  2. (2)

    Despite subsection (1), the System Operator is not required to register a healthcare recipient if the System Operator is satisfied that registering the healthcare recipient may compromise the security or integrity of the My Health Record system, having regard to the matters (if any) prescribed by the My Health Records Rules.

  3. (3)

    The System Operator is not required to register a healthcare recipient if the healthcare recipient does not consent to a registered healthcare provider organisation uploading to the My Health Record system any record that includes health information about the healthcare recipient, subject to the following:

    1. (a)

      express advice given by the healthcare recipient to the registered healthcare provider organisation that a particular record, all records or a specified class of records must not be uploaded;

    2. (b)

      a law of a State or Territory that is prescribed by the regulations for the purposes of subsection (4).

  4. (3A)

    A registered healthcare provider organisation is authorised to upload to the My Health Record system a record in relation to a healthcare recipient (the patient) that includes health information about another healthcare recipient (the third party), if the health information about the third party is directly relevant to the healthcare of the patient, subject to a law of a State or Territory that is prescribed by the regulations for the purposes of subsection (4).

  5. (4)

    A consent referred to in subsection (3), and an authorisation given under subsection (3A), have effect despite a law of a State or Territory that requires consent to the disclosure of particular health information:

    1. (a)

      to be given expressly; or

    2. (b)

      to be given in a particular way;

other than a law of a State or Territory prescribed by the regulations for the purposes of this subsection.

  1. (5)

    A decision under subsection (1) takes effect when it is made.

Division 1AHealthcare provider organisations that are required to be registered

41APrescribed healthcare provider organisations must be registered

  1. (1)

    A prescribed healthcare provider organisation contravenes this subsection if the healthcare provider organisation is not a registered healthcare provider organisation and is not an approved registered repository operator.

    Civil penalty: 250 penalty units.

  2. (2)

    However, subsection (1) does not apply:

    1. (a)

      during any period starting when the healthcare provider organisation applies to the System Operator under section 41B or 42 and ending when the application is finally determined; or

    2. (b)

      during any period approved by the System Operator under section 41B in relation to the healthcare provider organisation.

    Note: A person who wishes to rely on subsection (2) in proceedings for a civil penalty order bears an evidential burden in relation to the matters in that subsection: see section 96 of the Regulatory Powers Act.

41BSystem Operator may approve a period during which registration is not required

Application

  1. (1)

    A healthcare provider organisation may apply to the System Operator to approve a period during which subsection 41A(1) does not apply to the healthcare provider organisation.

  2. (2)

    The application must:

    1. (a)

      be in the approved form; and

    2. (b)

      include, or be accompanied by, the information and documents required by the form; and

    3. (c)

      be lodged at a place, or by a means, specified in the form.

Further information may be required

  1. (3)

    If a healthcare provider organisation makes an application under subsection (1), the System Operator may, by notice in writing, require the healthcare provider organisation to give the System Operator, within the period specified in the notice, such further information in relation to the application as the System Operator requires.

  2. (4)

    The System Operator is not required to decide the application, and may cease considering the application, if the healthcare provider organisation does not provide the required information within the period specified in the notice.

Approval by System Operator

  1. (5)

    On application under subsection (1) or on the System Operator’s initiative, the System Operator may, by written notice to a healthcare provider organisation, approve a period during which subsection 41A(1) does not apply to the healthcare provider organisation.

  2. (6)

    In deciding whether to approve the period, the System Operator must take into account the following:

    1. (a)

      the healthcare provider organisation’s size and technological readiness;

    2. (b)

      the potential disruption (if any) to the provision of healthcare if the healthcare provider organisation is not a registered healthcare provider organisation;

    3. (c)

      any other matter the System Operator considers relevant.

  3. (7)

    An approval under subsection (5) is not a legislative instrument.

Division 2Registering healthcare provider organisations42Healthcare provider organisation may apply for registration
  1. (1)

    A healthcare provider organisation may apply to the System Operator for registration of the healthcare provider organisation.

  2. (2)

    The application must:

    1. (a)

      be in the approved form; and

    2. (b)

      include, or be accompanied by, the information and documents required by the form; and

    3. (c)

      be lodged at a place, or by a means, specified in the form.

43When a healthcare provider organisation is eligible for registration

A healthcare provider organisation is eligible for registration if:

  1. (a)

    a healthcare identifier has been assigned under paragraph 9(1)(a) of the Healthcare Identifiers Act 2010 to the healthcare provider organisation; and

  2. (b)

    the healthcare provider organisation complies with such requirements as are specified in the My Health Records Rules.

44Registration of a healthcare provider organisation
  1. (1)

    The System Operator must decide to register a healthcare provider organisation if:

    1. (a)

      the healthcare provider organisation has made an application under section 42; and

    2. (b)

      the healthcare provider organisation is eligible for registration under section 43.

  2. (2)

    Despite subsection (1), the System Operator is not required to register a healthcare provider organisation if the System Operator is satisfied that registering the healthcare provider organisation may compromise the security or integrity of the My Health Record system, having regard to the matters (if any) prescribed by the My Health Records Rules.

  3. (3)

    The System Operator may impose conditions on the registration.

  4. (4)

    A decision under subsection (1) takes effect when it is made.

45Condition of registration – uploading of records, etc.

It is a condition of registration of a healthcare provider organisation that the healthcare provider organisation does not, for the purposes of the My Health Record system:

  1. (a)

    upload a record that includes health information about a registered healthcare recipient to a repository other than:

    1. (i)

      a repository that forms part of the National Repositories Service; or

    2. (ii)

      a repository to which a registered repository operator’s registration relates; or

  2. (b)

    upload to a repository a record:

    1. (i)

      that purports to be the shared health summary of a registered healthcare recipient, unless the record would, when uploaded, be the shared health summary of the registered healthcare recipient; or

    2. (ii)

      that is a record of a kind specified in the My Health Records Rules for the purposes of this paragraph, unless the record has been prepared by an individual healthcare provider to whom a healthcare identifier has been assigned under paragraph 9(1)(a) of the Healthcare Identifiers Act 2010; or

  3. (ba)

    upload to a repository a record of a kind specified in the My Health Records Rules for the purposes of subparagraph (b)(ii) unless the record is prepared by a person who, at the time the record is prepared, is:

    1. (i)

      an individual who is registered by a registration authority within the meaning of the Healthcare Identifiers Act 2010, and whose registration is not conditional, suspended, cancelled or lapsed (other than in circumstances prescribed in the My Health Records Rules); or

    2. (ii)

      an individual who is a member of a professional association described in paragraph 9A(1)(b) of the Healthcare Identifiers Act 2010, and whose membership is not conditional, suspended, cancelled or lapsed (other than in circumstances prescribed by the My Health Records Rules); or

  4. (c)

    upload a record to a repository if uploading the record would involve an infringement of a moral right of the author, within the meaning of the Copyright Act 1968; or

  5. (d)

    upload to a repository a record that includes health information about a registered consumer if the consumer has advised that the record is not to be uploaded.

45ACondition of registration – handling old records that are works subject to copyright

Old works must not be uploaded if it would be an infringement of copyright to use the work for healthcare or related purposes

  1. (1)

    Subsection (2) applies to works made before section 44BB of the Copyright Act 1968 commences.

    Note: Section 44BB of the Copyright Act 1968 provides that there is no infringement of copyright if an act comprised in the copyright of a work is done, or authorised to be done, for healthcare or related purposes.

  2. (2)

    A healthcare provider organisation must not, for the purposes of the My Health Record system, upload the work if it would be an infringement of the copyright in the work for the organisation or another person to do, or authorise to be done, an act comprised in the copyright of the work:

    1. (a)

      for a purpose for which the collection, use or disclosure of health information is required or authorised under this Act; or

    2. (b)

      in circumstances in which a permitted general situation exists under item 1 of the table in subsection 16A(1) of the Privacy Act 1988 (serious threat to life, health or safety), or would exist if the act were done, or authorised to be done, by an entity that is an APP entity for the purposes of that Act; or

    3. (c)

      in circumstances in which a permitted health situation exists under section 16B of the Privacy Act 1988, or would exist if the act were done, or authorised to be done, by an entity that is an organisation for the purposes of that Act; or

    4. (d)

      for any other purpose relating to healthcare, or the communication or management of health information, prescribed by the regulations.

  3. (3)

    It is a condition of the registration of a healthcare provider organisation that the organisation complies with the obligation under subsection (2).

45BCondition of registration – handling old sound recordings and cinematograph films that are subject to copyright
  1. (1)

    Subsection (2) applies to sound recordings and cinematograph films made before section 104C of the Copyright Act 1968 commences.

    Note: Section 104C of the Copyright Act 1968 provides that there is no infringement of the copyright if an act comprised in the copyright of a sound recording or cinematograph film is done, or authorised to be done, for healthcare or related purposes.

  2. (2)

    A healthcare provider organisation must not, for the purposes of the My Health Record system, upload the sound recording or cinematograph film if it would be an infringement of the copyright in the recording or film for the organisation or another person to do an act comprised in the copyright of the recording or film:

    1. (a)

      for a purpose for which the collection, use or disclosure of health information is required or authorised under this Act; or

    2. (b)

      in circumstances in which a permitted general situation exists under item 1 of the table in subsection 16A(1) of the Privacy Act 1988 (serious threat to life, health or safety), or would exist if the act were done by an entity that is an APP entity for the purposes of that Act; or

    3. (c)

      in circumstances in which a permitted health situation exists under section 16B of the Privacy Act 1988, or would exist if the act were done by an entity that is an organisation for the purposes of that Act; or

    4. (d)

      for any other purpose relating to healthcare, or the communication or management of health information, prescribed by the regulations.

  3. (3)

    It is a condition of the registration of a healthcare provider organisation that the organisation complies with the obligation under subsection (2).

45CLiability where work uploaded in breach of section 45A or 45B
  1. (1)

    If any person suffers loss or damage as a result of anything done by an entity that contravenes section 45A or 45B, the person may bring an action for the amount of the loss or damage against the entity in:

    1. (a)

      the Federal Court of Australia;

    2. (b)

      the Federal Circuit and Family Court of Australia (Division 2);

    3. (c)

      a court of a State or Territory that has jurisdiction in relation to the matter.

  2. (2)

    The action must be brought within 6 years after the loss or damage was suffered.

  3. (3)

    In determining the damage suffered by the person, the court may include costs incurred by the person as a result of legal action relating to infringement of copyright.

46Condition of registration – non‑discrimination in providing healthcare to a healthcare recipient who does not have a My Health Record etc.

Healthcare recipient who is not registered

  1. (1)

    It is a condition of registration of a healthcare provider organisation that the organisation does not:

    1. (a)

      refuse to provide healthcare to a healthcare recipient because the healthcare recipient is not registered under this Part; or

    2. (b)

      otherwise discriminate against a healthcare recipient in relation to the provision of healthcare because the healthcare recipient is not registered under this Part.

Registered healthcare recipient’s access controls

  1. (2)

    It is a condition of registration of a healthcare provider organisation that the organisation does not:

    1. (a)

      refuse to provide healthcare to a registered healthcare recipient because the healthcare recipient has set particular access controls on his or her My Health Record; or

    2. (b)

      otherwise discriminate against a healthcare recipient in relation to the provision of healthcare because the healthcare recipient has set particular access controls on his or her My Health Record.

Division 3Registering repository operators, portal operators and contracted service providers47Persons may apply for registration as a repository operator, a portal operator or a contracted service provider
  1. (1)

    A person may apply to the System Operator for registration as any of the following:

    1. (a)

      a repository operator;

    2. (b)

      a portal operator;

    3. (c)

      a contracted service provider.

  2. (2)

    An application for registration as a repository operator must specify each repository to which the registration is proposed to relate.

48When a person is eligible for registration as a repository operator, a portal operator or a contracted service provider

A person is eligible for registration as a repository operator, a portal operator or a contracted service provider if the System Operator is satisfied that:

  1. (a)

    the person complies with any My Health Records Rules that apply in relation to registration of the particular kind; and

  2. (b)

    the person has agreed to be bound by the conditions imposed by the System Operator on the person’s registration; and

  3. (c)

    in the case of a repository operator or a portal operator—the central management and control of the repository operator or portal operator will be located in Australia at all times when the repository operator or portal operator is registered; and

  4. (d)

    in the case of a repository operator or a portal operator that:

    1. (i)

      is a State or Territory authority, or an instrumentality of a State or Territory; and

    2. (ii)

      is not bound by a designated privacy law of the State or Territory;

the repository operator or portal operator is prescribed under section 6F of the Privacy Act 1988.

49Registration of a repository operator, a portal operator or a contracted service provider
  1. (1)

    The System Operator must decide to register a person as a repository operator, a portal operator or a contracted service provider if:

    1. (a)

      the person has made an application under section 47 for registration of that kind; and

    2. (b)

      the person is eligible for registration of that kind under section 48.

  2. (2)

    Despite subsection (1), the System Operator is not required to register a person as a repository operator, a portal operator or a contracted service provider if the System Operator is satisfied that registering the person may compromise the security or integrity of the My Health Record system, having regard to the matters (if any) prescribed by the My Health Records Rules.

  3. (3)

    The System Operator may impose conditions on the registration.

  4. (4)

    If the System Operator decides to register a person as a repository operator, the decision must specify the repositories to which the registration relates.

  5. (5)

    A decision under subsection (1) takes effect when it is made.

50Condition about provision of information to System Operator

It is a condition of registration of a registered repository operator, a registered portal operator or a registered contracted service provider that it must provide to the System Operator information included in the My Health Record of a healthcare recipient if requested to do so by the System Operator.

50ACondition of registration – handling old records that are works subject to copyright
  1. (1)

    Subsection (2) applies to works made before section 44BB of the Copyright Act 1968 commences.

    Note: Section 44BB of the Copyright Act 1968 provides that there is no infringement of copyright if an act comprised in the copyright of a work is done, or authorised to be done, for healthcare or related purposes.

  2. (2)

    A registered repository operator must not make the work available for the purposes of the My Health Record system, if it would be an infringement of the copyright in the work for the operator or another person to do, or authorise to be done, an act comprised in the copyright of the work:

    1. (a)

      for a purpose for which the collection, use or disclosure of health information is required or authorised under this Act; or

    2. (b)

      in circumstances in which a permitted general situation exists under item 1 of the table in subsection 16A(1) of the Privacy Act 1988 (serious threat to life, health or safety), or would exist if the act were done, or authorised to be done, by an entity that is an APP entity for the purposes of that Act; or

    3. (c)

      in circumstances in which a permitted health situation exists under section 16B of the Privacy Act 1988, or would exist if the act were done, or authorised to be done, by an entity that is an organisation for the purposes of that Act; or

    4. (d)

      for any other purpose relating to healthcare, or the communication or management of health information, prescribed by the regulations.

  3. (3)

    It is a condition of the registration of a registered repository operator that the operator complies with subsection (2).

50BCondition of registration – handling old sound recordings and cinematograph films that are subject to copyright
  1. (1)

    Subsection (2) applies to sound recordings and cinematograph films made before section 104C of the Copyright Act 1968 commences.

    Note: Section 104C of the Copyright Act 1968 provides that there is no infringement of the copyright if an act comprised in the copyright of a sound recording or cinematograph film is done, or authorised to be done, for healthcare or related purposes.

  2. (2)

    A registered repository operator must not, for the purposes of the My Health Record system, make the sound recording or cinematograph film available if it would be an infringement of the copyright in the recording or film for the operator or another person to do any act comprised in the copyright in the recording or film:

    1. (a)

      for a purpose for which the collection, use or disclosure of health information is required or authorised under this Act; or

    2. (b)

      in circumstances in which a permitted general situation exists under item 1 of the table in subsection 16A(1) of the Privacy Act 1988 (serious threat to life, health or safety), or would exist if the act were done by an entity that is an APP entity for the purposes of that Act; or

    3. (c)

      in circumstances in which a permitted health situation exists under section 16B of the Privacy Act 1988, or would exist if the act were done by an entity that is an organisation for the purposes of that Act; or

    4. (d)

      for any other purpose relating to healthcare, or the communication or management of health information, prescribed by the regulations.

  3. (3)

    It is a condition of the registration of a registered repository operator that the operator complies with subsection (2).

50CLiability where work uploaded in breach of section 50A or 50B
  1. (1)

    If any person suffers loss or damage as a result of anything done by an entity that contravenes section 50A or 50B, the person may bring an action for the amount of the loss or damage against the entity in:

    1. (a)

      the Federal Court of Australia;

    2. (b)

      the Federal Circuit and Family Court of Australia (Division 2);

    3. (c)

      a court of a State or Territory that has jurisdiction in relation to the matter.

  2. (2)

    The action must be brought within 6 years after the loss or damage was suffered.

  3. (3)

    In determining the damage suffered by the person, the court may include costs incurred by the person as a result of legal action relating to infringement of copyright.

50DAuthorisation to make health information available to the System Operator

A registered repository operator (other than the Chief Executive Medicare) is authorised to make health information about a registered healthcare recipient that is held by the operator available to the System Operator.

Division 4Cancellation, suspension and variation of registration51Cancellation or suspension of registration

Cancellation or suspension on request

  1. (1)

    The System Operator must, in writing, decide to cancel or suspend the registration of a healthcare recipient or other entity if the healthcare recipient or other entity requests the System Operator, in writing, to cancel or suspend the registration.

Cancellation or suspension if healthcare recipient no longer eligible, etc.

  1. (2)

    The System Operator may, in writing, decide to cancel or suspend the registration of a healthcare recipient if:

    1. (a)

      the System Operator is no longer satisfied that the healthcare recipient is eligible to be registered; or

    2. (b)

      the System Operator is no longer satisfied, having regard to the matters (if any) specified in the My Health Records Rules, that the identity of the healthcare recipient has been appropriately verified; or

    3. (c)

      the System Operator is satisfied that, unless the registration of the healthcare recipient is cancelled, the security or integrity of the My Health Record system may be compromised, having regard to the matters (if any) prescribed by the My Health Records Rules; or

    4. (d)

      the System Operator is satisfied that the consent referred to in subsection 41(3) in relation to the healthcare recipient has been withdrawn; or

    5. (e)

      the System Operator is satisfied that the consent referred to in subsection 41(3) in relation to the healthcare recipient was given by an authorised representative or nominated representative of the healthcare recipient, and:

      1. (i)

        the authorised representative or nominated representative who gave the consent ceases to be an authorised representative or nominated representative of the healthcare recipient; and

      2. (ii)

        the System Operator requests the healthcare recipient to give consent of the kind referred to in subsection 41(3); and

      3. (iii)

        the healthcare recipient does not, within a reasonable period, give the consent.

Cancellation or suspension if other entity no longer eligible, etc.

  1. (3)

    The System Operator may, in writing, decide to cancel or suspend the registration of an entity other than a healthcare recipient if:

    1. (a)

      the System Operator is no longer satisfied that the entity is eligible to be registered; or

    2. (b)

      the System Operator is satisfied that:

      1. (i)

        the entity has contravened this Act or a condition of the entity’s registration; or

      2. (ii)

        cancellation or suspension of registration is reasonably necessary to prevent such a contravention; or

      3. (iii)

        cancellation or suspension of registration is otherwise appropriate, having regard to the need to protect the security and integrity of the My Health Record system.

  2. (3A)

    The System Operator may, in writing, decide to cancel or suspend the registration of a healthcare provider organisation if the System Operator is not satisfied that the healthcare provider organisation is able to comply with the conditions of the healthcare provider organisation’s registration.

Suspension while investigating action in relation to healthcare recipient’s registration

  1. (4)

    The System Operator may, in writing, decide to suspend the registration of a healthcare recipient while the System Operator investigates whether to take action under subsection (2) in relation to the healthcare recipient’s registration.

Suspension while investigating action in relation to entity’s registration

  1. (5)

    The System Operator may, in writing, decide to suspend the registration of an entity other than a healthcare recipient while the System Operator investigates whether to take action under subsection (3) or (3A) in relation to the entity’s registration.

Cancellation of registration of healthcare recipient on death

  1. (6)

    The System Operator must decide to cancel the registration of a healthcare recipient if the System Operator is satisfied that the healthcare recipient has died.

When cancellation or suspension takes effect

  1. (7)

    A decision under this section takes effect:

    1. (a)

      when it is made; or

    2. (b)

      if the decision is made at the request of the healthcare recipient or other entity, and the request states that the healthcare recipient or other entity wishes the cancellation or suspension to occur at a specified future time—at that future time.

    Note: Under section 53, the System Operator must give the healthcare recipient or other entity notice before cancelling, suspending or varying registration (except in urgent circumstances). The decision to cancel, suspend or vary registration cannot be made before the end of the period specified in the notice.

52Variation of registration
  1. (1)

    The System Operator may decide, on the System Operator’s initiative or on the request of a healthcare recipient or other entity, to vary the registration of the healthcare recipient or other entity:

    1. (a)

      to impose conditions, or additional conditions, on the registration; or

    2. (b)

      to vary or revoke conditions imposed on the registration; or

    3. (c)

      in the case of a registered repository operator—to vary the repositories to which the registration relates; or

    4. (d)

      to correct an error or omission in the registration.

  2. (2)

    A decision under this section takes effect:

    1. (a)

      when it is made; or

    2. (b)

      if the decision is made at the request of the healthcare recipient or other entity, and the request states that the healthcare recipient or other entity wishes the variation to occur at a specified future time—at that future time.

    Note: Under section 53, the System Operator must give the healthcare recipient or other entity notice before cancelling, suspending or varying registration (except in urgent circumstances). The decision to cancel, suspend or vary registration cannot be made before the end of the period specified in the notice.

53Notice of cancellation, suspension or variation of registration etc.

Written notice before cancellation etc. other than in urgent circumstances

  1. (1)

    The System Operator must give written notice to a healthcare recipient or other entity before:

    1. (a)

      cancelling or suspending the registration of the healthcare recipient or entity under subsection 51(2), (3), (3A), (4) or (5); or

    2. (b)

      varying the entity’s registration under section 52;

other than as mentioned in subsection (4) of this section (urgency).

  1. (2)

    The notice:

    1. (a)

      must state that the System Operator proposes to cancel, suspend or vary the registration and the reasons why; and

    2. (b)

      in the case of an entity that the System Operator is satisfied has contravened or may contravene this Act or a condition of the entity’s registration—may specify steps that the entity must take in order to address the contravention or possible contravention; and

    3. (c)

      must invite the healthcare recipient or other entity to make a written submission, within the period specified in the notice, to the System Operator in relation to the proposed cancellation, suspension or variation.

  2. (3)

    If the System Operator gives written notice to a healthcare recipient or other entity under subsection (1), the System Operator must not decide to cancel, suspend or vary the registration until after the end of the period referred to in paragraph (2)(c).

Cancellation etc. in urgent circumstances

  1. (4)

    If the System Operator is satisfied that it is necessary, because of the urgency of the circumstances, to cancel, suspend or vary the registration of a healthcare recipient or other entity without following the process outlined in subsections (1) to (3), the System Operator must give written notice to the healthcare recipient or other entity:

    1. (a)

      cancelling or suspending the registration of the healthcare recipient or entity under subsection 51(2), (3), (3A), (4) or (5); or

    2. (b)

      varying the entity’s registration under section 52.

  2. (5)

    A decision under subsection (4) takes effect:

    1. (a)

      when notice of the decision is given under that subsection; or

    2. (b)

      if a later time is specified in the notice under that subsection—at that later time.

54Effect of suspension

During any period when the registration of a healthcare recipient or other entity is suspended:

  1. (a)

    the healthcare recipient or other entity is taken not to be registered for the purposes of Division 2 of Part 4 (authorised collection, use and disclosure of health information), other than:

    1. (i)

      paragraph 63(b) (collection, use or disclosure on request of the System Operator); and

    2. (ii)

      subsection 64(1) (serious threat); and

  2. (ab)

    if the entity is a registered healthcare provider organisation or registered repository operator—the entity is taken not to be registered for the purposes of paragraph (a) of the definition of approved registered repository operator in section 5 and sections 10A, 41A, 78A, 78C and 78D; and

  3. (b)

    if the entity is a registered repository operator, a registered portal operator or a registered contracted service provider—the entity is taken to be registered for the purposes of the remaining provisions of this Act.

55My Health Records Rules may specify requirements after registration is cancelled or suspended
  1. (1)

    The My Health Records Rules may specify the requirements to which the System Operator or another entity is subject after the registration of a healthcare recipient or other entity is cancelled or suspended.

  2. (2)

    The My Health Records Rules cannot modify the effect of section 54.

  3. (3)

    The requirements specified in the My Health Records Rules may include requirements relating to the following:

    1. (a)

      retention, transfer or disposal of My Health Records;

    2. (b)

      retention, transfer or disposal of other records.

Division 5The Register56The Register
  1. (1)

    The System Operator must establish and maintain a Register.

  2. (2)

    The Register may be maintained in electronic form and may be divided into separate parts.

  3. (3)

    The Register is not a legislative instrument.

57Entries to be made in Register

If the System Operator decides under this Part to register a healthcare recipient or other entity or to cancel, suspend or vary such a registration, the System Operator must, as soon as practicable after making the decision, ensure that the following information is entered in the Register in relation to the healthcare recipient or other entity:

  1. (a)

    such administrative information as is necessary for the purposes of the proper operation of the My Health Record system;

  2. (b)

    such information (if any) as is specified in the My Health Records Rules for the purposes of this paragraph.

Division 6Collection, use and disclosure of information for the purposes of the My Health Record System58Collection, use and disclosure of health information by the System Operator

The System Operator may collect, use and disclose health information about a healthcare recipient for the purposes of including the health information in the My Health Record of a registered healthcare recipient.

58ACollection, use and disclosure of healthcare identifiers, identifying information and information identifying authorised representatives and nominated representatives
  1. (1)

    An entity mentioned in column 1 of an item of the following table, is authorised to take action of the kind described in column 2 of that item with information of the kind described in column 3 of that item in the circumstances described in column 4 of that item.

Collection, use and disclosure for the purpose of the My Health Record system

Item

Column 1

Entity

Column 2

Permitted action

Column 3

Information

Column 4

Circumstances

1

System Operator

collect

use

disclose

identifying information about any of the following:

(a) a healthcare recipient;

(b) an authorised representative of a healthcare recipient;

(c) a nominated representative of a healthcare recipient;

(d) a healthcare provider

the healthcare identifier of any of the following:

(a) a healthcare recipient;

(b) an authorised representative of a healthcare recipient;

(c) a nominated representative of a healthcare recipient;

(d) a healthcare provider

the collection, use or disclosure is for the purposes of the My Health Record system

2

System Operator

collect

use

disclose

information relevant to whether a person is an authorised representative, or nominated representative, of another person

    1. (b)

      if another time is prescribed by the My Health Records Rules—at that time.

  1. (5)

    The notice under subclause (4):

    1. (a)

      must be in the approved form; and

    2. (b)

      be lodged at a place, or by a means, specified in the form.

14Health information uploaded or made available may include details of healthcare providers

The health information about a healthcare recipient uploaded under clause 11 or made available under clause 12 may include the name of one or more healthcare providers that have provided healthcare to the healthcare recipient.

15Way in which repository operated not limited by this Division

Nothing in this Division limits the way in which the repository is to be operated.

Subdivision COther registered repository operators16Making health information available to the System Operator

A registered repository operator (other than the Chief Executive Medicare) may make available to the System Operator health information held by the registered repository operator about a registered healthcare recipient.

Part 3Other consequences of applying the opt‑out rules 17References to other provisions of this Act

If Part 2 of this Schedule applies in relation to a healthcare recipient:

  1. (a)

    Division 4 of Part 2 of this Act does not apply in relation to the healthcare recipient; and

  2. (b)

    Division 1 of Part 3 of this Act does not apply in relation to the healthcare recipient; and

  3. (c)

    section 46 applies as if the reference to “this Part” were a reference to “Part 2 of Schedule 1 to this Act”; and

  4. (d)

    section 50D does not apply in relation to the healthcare recipient; and

  5. (e)

    paragraphs 51(2)(d) and (e) do not apply in relation to the healthcare recipient (consent to upload information to the My Health Record system); and

  6. (f)

    section 57 applies as if a reference to a decision under Part 3 to register a healthcare recipient were a reference to a decision under Part 2 of this Schedule to register the healthcare recipient; and

  7. (g)

    Division 6 of Part 3 of this Act does not apply in relation to the healthcare recipient; and

  8. (h)

    in relation to the healthcare recipient, the reference in paragraph 97(1)(b) to a decision under section 41 to refuse to register a healthcare recipient is taken to include a reference to a decision under Part 2 of this Schedule to refuse to register the healthcare recipient; and

  9. (i)

    if the healthcare recipient is registered under Part 2 of this Schedule—a reference in this Act to a registered healthcare recipient is taken to include a reference to the healthcare recipient.

Endnotes

Endnote 1About the endnotes

The endnotes provide information about this compilation and the compiled law.

The following endnotes are included in every compilation:

Endnote 1—About the endnotes

Endnote 2—Abbreviation key

Endnote 3—Legislation history

Endnote 4—Amendment history

Abbreviation key—Endnote 2

The abbreviation key sets out abbreviations that may be used in the endnotes.

Legislation history and amendment history—Endnotes 3 and 4

Amending laws are annotated in the legislation history and amendment history.

The legislation history in endnote 3 provides information about each law that has amended (or will amend) the compiled law. The information includes commencement details for amending laws and details of any application, saving or transitional provisions that are not included in this compilation.

The amendment history in endnote 4 provides information about amendments at the provision (generally section or equivalent) level. It also includes information about any provision of the compiled law that has been repealed in accordance with a provision of the law.

Editorial changes

The Legislation Act 2003 authorises First Parliamentary Counsel to make editorial and presentational changes to a compiled law in preparing a compilation of the law for registration. The changes must not change the effect of the law. Editorial changes take effect from the compilation registration date.

If the compilation includes editorial changes, the endnotes include a brief outline of the changes in general terms. Full details of any changes can be obtained from the Office of Parliamentary Counsel.

Misdescribed amendments

A misdescribed amendment is an amendment that does not accurately describe how an amendment is to be made. If, despite the misdescription, the amendment can be given effect as intended, then the misdescribed amendment can be incorporated through an editorial change made under section 15V of the Legislation Act 2003.

If a misdescribed amendment cannot be given effect as intended, the amendment is not incorporated and “(md not incorp)” is added to the amendment history.

Endnote 2Abbreviation key

ad = added or inserted

o = order(s)

am = amended

Ord = Ordinance

amdt = amendment

orig = original

c = clause(s)

par = paragraph(s)/subparagraph(s)

C[x] = Compilation No. x

/sub‑subparagraph(s)

Ch = Chapter(s)

pres = present

def = definition(s)

prev = previous

Dict = Dictionary

(prev…) = previously

disallowed = disallowed by Parliament

Pt = Part(s)

Div = Division(s)

r = regulation(s)/rule(s)

ed = editorial change

reloc = relocated

exp = expires/expired or ceases/ceased to have

renum = renumbered

effect

rep = repealed

F = Federal Register of Legislation

rs = repealed and substituted

gaz = gazette

s = section(s)/subsection(s)

LA = Legislation Act 2003

Sch = Schedule(s)

LIA = Legislative Instruments Act 2003

Sdiv = Subdivision(s)

(md) = misdescribed amendment can be given

SLI = Select Legislative Instrument

effect

SR = Statutory Rules

(md not incorp) = misdescribed amendment

Sub‑Ch = Sub‑Chapter(s)

cannot be given effect

SubPt = Subpart(s)

mod = modified/modification

underlining = whole or part not

No. = Number(s)

commenced or to be commenced

Endnote 3Legislation history

Act

Number and year

Assent

Commencement

Application, saving and transitional provisions

Personally Controlled Electronic Health Records Act 2012

63, 2012

26 June 2012

s 3–112: 29 June 2012 (s 2(1) item 2)

Remainder: 26 June 2012 (s 2(1) item 1)

Privacy Amendment (Enhancing Privacy Protection) Act 2012

197, 2012

12 Dec 2012

Sch 5 (item 71) and Sch 6 (items 15–19): 12 Mar 2014 (s 2(1) items 3, 19)

Sch 6 (item 1): 12 Dec 2012 (s 2(1) item 16)

Sch 6 (items 1, 15–19)

as amended by

Statute Law Revision Act (No. 1) 2015

5, 2015

25 Feb 2015

Sch 2 (item 6): 12 Mar 2014 (s 2(1) item 7)

Federal Circuit Court of Australia (Consequential Amendments) Act 2013

13, 2013

14 Mar 2013

Sch 1 (item 465): 12 Apr 2013 (s 2(1) item 2)

Acts and Instruments (Framework Reform) (Consequential Provisions) Act 2015

126, 2015

10 Sept 2015

Sch 1 (item 475): 5 Mar 2016 (s 2(1) item 2)

Health Legislation Amendment (eHealth) Act 2015

157, 2015

26 Nov 2015

Sch 1 (items 50–106, 111–136), Sch 2 (items 15–84) and Sch 3 (items 4–8): 27 Nov 2015 (s 2(1) item 2)

Sch 4 (item 1): 5 Mar 2016 (s 2(1) item 3)

Sch 1 (items 111–136)

Statute Law Revision (Spring 2016) Act 2016

67, 2016

20 Oct 2016

Sch 1 (item 34): 17 Nov 2016 (s 2(1) item 2)

Statute Update (Winter 2017) Act 2017

93, 2017

23 Aug 2017

Sch 1 (item 16): 20 Sept 2017 (s 2(1) item 2)

My Health Records Amendment (Strengthening Privacy) Act 2018

154, 2018

10 Dec 2018

Sch 1 (items 1AA, 1AB, 1, 1A, 1BA, 1BB, 1B, 1CA, 1C, 1DA, 1D, 1E, 2–6, 6A–6E, 7–16, 16A–16H, 16J–16M, 17): 11 Dec 2018 (s 2(1) item 2)

Sch 2: 10 Dec 2019 (s 2(1) item 3)

Sch 1 (item 17)

Services Australia Governance Amendment Act 2020

104, 2020

20 Nov 2020

Sch 1 (items 39–41, 66): 1 Feb 2020 (s 2(1) item 2)

Sch 1 (item 66)

Federal Circuit and Family Court of Australia (Consequential Amendments and Transitional Provisions) Act 2021

13, 2021

1 Mar 2021

Sch 2 (item 599): 1 Sept 2021 (s 2(1) item 5)

Statute Law Amendment (Prescribed Forms and Other Updates) Act 2023

74, 2023

20 Sept 2023

Sch 4 (item 53): 18 Oct 2023 (s 2(1) item 3)

Administrative Review Tribunal (Consequential and Transitional Provisions No. 1) Act 2024

38, 2024

31 May 2024

Sch 12 (item 44): 14 Oct 2024 (s 2(1) item 2)

COAG Legislation Amendment Act 2024

54, 2024

5 July 2024

Sch 2 (items 16–19, 94–98): 6 July 2024 (s 2(1) items 3, 6)

Sch 2 (items 94–98)

Health Legislation Amendment (Modernising My Health Record—Sharing by Default) Act 2025

8, 2025

14 Feb 2025

Sch 1 (items 1–24): 15 Feb 2025 (s 2(1) item 2)

Sch 1 (item 24)

Endnote 4Amendment history

Provision affected

How affected

Part 1

s 1.............................................

am No 157, 2015

s 3.............................................

am No 157, 2015; No 154, 2018; No 8, 2025

s 4.............................................

rs No 157, 2015

am No 154, 2018; No 8, 2025

s 4A...........................................

ad No 157, 2015

s 5.............................................

am No 13, 2013; No 157, 2015; No 67, 2016; No 154, 2018; No 104, 2020; No 54, 2024; No 8, 2025

s 6.............................................

am No 157, 2015; No 67, 2016; No 154, 2018

s 7.............................................

am No 157, 2015; No 67, 2016; No 154, 2018

s 7A...........................................

ad No 157, 2015

s 8.............................................

am No 157, 2015

s 9.............................................

am No 157, 2015

s 10............................................

am No 157, 2015

s 10A.........................................

ad No 8, 2025

s 10B.........................................

ad No 8, 2025

s 10C.........................................

ad No 8, 2025

s 11............................................

am No 157, 2015

s 13B.........................................

ad No 157, 2015

Part 2

Part 2 heading.............................

rs No 157, 2015

Division 1

s 15............................................

am No 157, 2015; No 67, 2016; No 154, 2018

s 16............................................

rep No 157, 2015

ad No 154, 2018

am No 154, 2018

s 17............................................

am No 157, 2015; No 154, 2018

Division 2..................................

rep No 157, 2015

s 18............................................

rep No 157, 2015

s 19............................................

rep No 157, 2015

s 20............................................

rep No 157, 2015

s 21............................................

rep No 157, 2015

s 22............................................

rep No 157, 2015

s 23............................................

rep No 157, 2015

Division 3..................................

rep No 157, 2015

s 24............................................

rep No 157, 2015

s 25............................................

rep No 157, 2015

s 26............................................

rep No 157, 2015

s 27............................................

rep No 157, 2015

s 28............................................

rep No 157, 2015

s 29............................................

rep No 157, 2015

s 30............................................

rep No 157, 2015

s 31............................................

rep No 157, 2015

s 32............................................

rep No 157, 2015

s 33............................................

rep No 157, 2015

s 34............................................

rep No 157, 2015

s 35............................................

rep No 157, 2015

s 36............................................

rep No 157, 2015

s 37............................................

rep No 157, 2015

Division 4

s 38............................................

am No 157, 2015

Part 3

Division 1

Division 1 heading......................

am No 157, 2015

Division 1..................................

am No 157, 2015

s 39............................................

am No 157, 2015

s 40............................................

am No 157, 2015

s 41............................................

am No 157, 2015; No 67, 2016

Division 1A

Division 1A................................

ad No 8, 2025

s 41A.........................................

ad No 8, 2025

s 41B.........................................

ad No 8, 2025

Division 2

s 43............................................

am No 157, 2015; No 67, 2016; No 8, 2025

s 44............................................

am No 157, 2015; No 67, 2016

s 45............................................

am No 157, 2015; No 67, 2016

s 45A.........................................

ad No 157, 2015

s 45B.........................................

ad No 157, 2015

s 45C.........................................

ad No 157, 2015

am No 13, 2021

s 46............................................

am No 157, 2015

Division 3

s 48............................................

am No 157, 2015; No 67, 2016

s 49............................................

am No 157, 2015; No 67, 2016

s 50............................................

am No 157, 2015

s 50A.........................................

ad No 157, 2015

s 50B.........................................

ad No 157, 2015

s 50C.........................................

ad No 157, 2015

am No 13, 2021

s 50D.........................................

ad No 157, 2015

Division 4

s 51............................................

am No 157, 2015; No 67, 2016; No 8, 2025

s 52............................................

am No 157, 2015

s 53............................................

am No 157, 2015; No 8, 2025

s 54............................................

am No 157, 2015; No 8, 2025

s 55............................................

am No 157, 2015; No 67, 2016

Division 5

s 57............................................

am No 157, 2015; No 67, 2016

Division 6

Division 6 heading......................

rs No 157, 2015

s 58............................................

rs No 157, 2015

s 58A.........................................

ad No 157, 2015

Part 4

Part 4 heading.............................

rs No 157, 2015

Division 1

Division 1 heading......................

rs No 157, 2015

s 59............................................

am No 157, 2015; No 154, 2018

s 59A.........................................

ad No 154, 2018

s 60............................................

am No 157, 2015; No 154, 2018

Division 2

Subdivision A

s 61............................................

am No 157, 2015; No 67, 2016

s 62............................................

am No 157, 2015; No 67, 2016

Subdivision B

s 63............................................

am No 157, 2015; No 154, 2018

s 64............................................

am No 157, 2015; No 93, 2017

s 65............................................

am No 157, 2015; No 154, 2018

s 66............................................

am No 157, 2015

s 67............................................

am No 157, 2015; No 154, 2018

s 68............................................

am No 157, 2015

s 69............................................

am No 157, 2015; No 8, 2025

s 69A.........................................

ad No 154, 2018

am No 74, 2023

s 69B.........................................

ad No 154, 2018

s 70............................................

am No 157, 2015; No 154, 2018

s 70AA......................................

ad No 8, 2025

Subdivision C

Subdivision C.............................

ad No 154, 2018

s 70A.........................................

ad No 154, 2018

s 70B.........................................

ad No 154, 2018

Division 3

Division 3 heading......................

rs No 157, 2015

s 71............................................

am No 157, 2015

Division 3A

Division 3A................................

ad No 154, 2018

s 71AA......................................

ad No 154, 2018

s 71A.........................................

ad No 154, 2018

s 71B.........................................

ad No 154, 2018

Division 4

s 72............................................

am No 157, 2015

s 73............................................

am No 197, 2012; No 157, 2015

s 73A.........................................

am No 157, 2015

s 73B.........................................

am No 157, 2015

Division 5

Division 5..................................

ad No 8, 2025

s 73C.........................................

ad No 8, 2025

s 73D.........................................

ad No 8, 2025

Part 5

Part 5 heading.............................

am No 154, 2018

s 74............................................

am No 157, 2015

s 75............................................

rs No 157, 2015

am No 154, 2018

s 76............................................

am No 154, 2018

s 76A.........................................

ad No 8, 2025

s 77............................................

am No 157, 2015; No 154, 2018

s 77A.........................................

ad No 154, 2018

s 78............................................

rs No 157, 2015

am No 67, 2016; No 154, 2018

s 78A.........................................

ad No 8, 2025

s 78B.........................................

ad No 8, 2025

s 78C.........................................

ad No 8, 2025

s 78D.........................................

ad No 8, 2025

Part 6

Part 6.........................................

rs No 157, 2015

Division 1

s 79............................................

rs No 157, 2015

am No 13, 2021; No 8, 2025

Division 1A

Division 1A................................

ad No 8, 2025

s 79A.........................................

ad No 8, 2025

Division 2

s 80............................................

rs No 157, 2015

am No 13, 2021; No 8, 2025

Division 3

s 81............................................

rs No 157, 2015

am No 13, 2021; No 8, 2025

Part 7

Part 7.........................................

ad No 154, 2018

Division 1

Division 1..................................

ad No 154, 2018

s 82............................................

rep No 157, 2015

ad No 154, 2018

s 83............................................

rep No 157, 2015

ad No 154, 2018

Division 2

Division 2..................................

ad No 154, 2018

s 84............................................

rep No 157, 2015

ad No 154, 2018

s 85............................................

rep No 157, 2015

ad No 154, 2018

s 86............................................

rep No 157, 2015

ad No 154, 2018

s 87............................................

rep No 157, 2015

ad No 154, 2018

s 88............................................

rep No 157, 2015

ad No 154, 2018

s 89............................................

rep No 157, 2015

ad No 154, 2018

s 90............................................

rep No 157, 2015

ad No 154, 2018

s 91............................................

rep No 157, 2015

ad No 154, 2018

s 92............................................

rep No 157, 2015

ad No 154, 2018

s 93............................................

rep No 157, 2015

ad No 154, 2018

Division 3

Division 3..................................

ad No 154, 2018

Part 7.........................................

rep No 157, 2015

s 94............................................

rep No 157, 2015

ad No 154, 2018

s 95............................................

rep No 157, 2015

ad No 154, 2018

s 96............................................

rep No 157, 2015

ad No 154, 2018

s 96A.........................................

ad No 154, 2018

s 96B.........................................

ad No 154, 2018

s 96C.........................................

ad No 154, 2018

s 96D.........................................

ad No 154, 2018

Division 4

Division 4..................................

ad No 154, 2018

s 96E.........................................

ad No 154, 2018

s 96F..........................................

ad No 154, 2018

s 96G.........................................

ad No 154, 2018

s 96H.........................................

ad No 154, 2018

s 96J..........................................

ad No 154, 2018

Part 8

Division 1

s 97............................................

am No 157, 2015; No 154, 2018; No 38, 2024; No 8, 2025

Division 2

s 98............................................

am No 157, 2015; No 154, 2018

Division 3

s 99............................................

am No 157, 2015

Division 4

s 100..........................................

am No 157, 2015

s 101..........................................

am No 157, 2015

s 102..........................................

am No 157, 2015

s 103..........................................

rep No 157, 2015

Division 5

s 105..........................................

am No 157, 2015; No 154, 2018; No 104, 2020

Division 6

s 106..........................................

am No 157, 2015

s 107..........................................

rs No 157, 2015

s 108..........................................

rs No 157, 2015

Division 7

Division 7 heading......................

rs No 157, 2015

s 109..........................................

am No 157, 2015; No 67, 2016; No 154, 2018; No 54, 2024

s 109A.......................................

ad No 154, 2018

s 111..........................................

am No 126, 2015

s 112..........................................

am No 157, 2015; No 67, 2016

Schedule 1

Schedule 1..................................

ad No 157, 2015

Part 1

c 1.............................................

ad No 157, 2015

am No 54, 2024

c 2.............................................

ad No 157, 2015

Part 2

Division 1

c 3.............................................

ad No 157, 2015

c 4.............................................

ad No 157, 2015

c 5.............................................

ad No 157, 2015

c 6.............................................

ad No 157, 2015

Division 2

c 7.............................................

ad No 157, 2015

c 8.............................................

ad No 157, 2015

Division 3

Subdivision A

c 9.............................................

ad No 157, 2015

Subdivision B

c 10...........................................

ad No 157, 2015

c 11...........................................

ad No 157, 2015

c 12...........................................

ad No 157, 2015

c 13...........................................

ad No 157, 2015

c 14...........................................

ad No 157, 2015

c 15...........................................

ad No 157, 2015

Subdivision C

c 16...........................................

ad No 157, 2015

Part 3

c 17...........................................

ad No 157, 2015

Actions
Download as PDF Download as Word Document


Cases Citing This Decision

0

Cases Cited

0

Statutory Material Cited

0