Overview

The Personally Controlled Electronic Health Records (Consequential Amendments) Act 2012 was enacted by the Parliament of Australia and received the Royal Assent on 26 June 2012. The Act was introduced to address the need for amendments to existing health-related legislation to ensure the effective and appropriate operation of the new Personally Controlled Electronic Health Records Act 2012 (PCEHR Act). This new Act facilitates the establishment and management of a national system for personally controlled electronic health records (PCEHR), allowing consumers access to their health information and the ability to control who can access their records. The Consequential Amendments Act aims to ensure that the PCEHR system operates smoothly by making necessary adjustments to the Healthcare Identifiers Act 2010, the Health Insurance Act 1973, and the National Health Act 1953. The Proclamation, fixing 29 June 2012 as the commencement date for the amendments, allows for real data testing of the PCEHR system before it goes live on 1 July 2012, transitioning from test data to actual consumer data for system validation.

Scope and Application

The Personally Controlled Electronic Health Records (Consequential Amendments) Act 2012 applies to entities and individuals involved in the administration and operation of Australia's national healthcare system, specifically those that will be engaged in the establishment and management of the Personally Controlled Electronic Health Records (PCEHR) system. This Act is designed to ensure that the PCEHR system functions effectively by making necessary amendments to the Healthcare Identifiers Act 2010, the Health Insurance Act 1973, and the National Health Act 1953. The Act ensures the PCEHR system's integration with existing health infrastructure and regulatory frameworks, providing a seamless pathway for the transition to a digitally managed health record system. The geographic reach of the Act is national, given its amendments to federal legislation and its role in the uniform implementation of the PCEHR system across Australia. The Act's provisions, as outlined in the Proclamation, are set to commence on 29 June 2012, with a fallback date of the day after the Act receives Royal Assent, whichever is later. This timing facilitates real data testing of the PCEHR system before its official launch on 1 July 2012. The Department of Health, in consultation with relevant agencies such as the Department of Human Services and the National Infrastructure Partner, has overseen the preparatory stages, ensuring that the amendments are implemented in a manner that supports the smooth operation of the PCEHR system. The Act does not specify exclusions or thresholds but rather focuses on ensuring that the amendments are effective and comprehensive in their application to the PCEHR system.

Key Provisions

The Consequential Amendments Act, specifically through its Schedule 1, provides amendments to three key pieces of legislation: the Healthcare Identifiers Act 2010, the Health Insurance Act 1973, and the National Health Act 1953. These amendments are necessary to ensure that the Personally Controlled Electronic Health Records Act 2012 (PCEHR Act) operates appropriately and effectively. The primary objective of these changes is to facilitate the establishment and operation of a national system for personally controlled electronic health records (PCEHR). This system will grant consumers access to their health information and enable them to control who can access their records within the healthcare provider organisations. The amendments aim to ensure that the PCEHR Act, which is set to commence on 1 July 2012, integrates smoothly with the existing healthcare framework. The obligations imposed by the Consequential Amendments Act primarily focus on the integration and coordination of the PCEHR system with the existing health records and identifiers systems. Under these amendments, the Department of Human Services and the National Infrastructure Partner are required to ensure that the PCEHR system is fully operational and ready for consumer registration from 1 July 2012. This includes implementing necessary technical and administrative processes to support the system’s functionality and security. Additionally, healthcare providers and other relevant entities must comply with the new provisions to facilitate the controlled access to PCEHRs by consumers. This involves updating their systems and practices to align with the new legal framework governing the management and sharing of health information. Breaches of the provisions set out in the Consequential Amendments Act may lead to both civil and criminal consequences. While the Act itself does not explicitly detail specific offences or penalties, it is understood that any non-compliance with the PCEHR system's operational requirements could result in actions under the broader legislative framework that governs health records and privacy. For example, unauthorised access or disclosure of personal health information could be prosecuted under the Privacy Act 1988, which carries significant penalties including fines and imprisonment. The maximum penalty for serious or repeated violations of privacy provisions can reach up to $222,000 for individuals and $1,110,000 for bodies corporate, reflecting the seriousness with which the law treats breaches of health information security and privacy.