Private Health Insurance (Data Provision) Amendment Rules 2023

Administered by Department of Health, Disability and Ageing

Legislation au F2023L00879 Rules Not in force Legislative Instrument

Legislation content

EXPLANATORY STATEMENT

 

Private Health Insurance Act 2007

 

Private Health Insurance (Data Provision) Amendment Rules 2023  

 

Authority

 

Subsection 333-20(1) of the Private Health Insurance Act 2007 (the Act) authorises the Minister of Health and Aged Care to, by legislative instrument, make Private Health Insurance Rules. The types of rules are specified in the second column of the table provided in subsection 333-20(1). In particular, the Minister is authorised to make Private Health Insurance (Data Provision) Rules as specified in item 9 of the table in subsection 333-20(1). The rules provide for matters required or permitted by Part 4-5 of the Act, or necessary or convenient in order to carry out or give effect to Part 4-5 of the Act. Part 4-5 of the Act imposes miscellaneous notification and other obligations on private health insurers.

 

Subsection 33(3) of the Acts Interpretation Act 1901 provides that where an Act confers a power to make, grant or issue any instrument of a legislative or administrative character (including rules, regulations or by-laws), the power shall be construed as including a power exercisable in the like manner and subject to the like conditions (if any) to repeal, rescind, revoke, amend, or vary any such instrument.

 

Purpose

 

The Private Health Insurance (Data Provision) Amendment Rules 2023 (the Amendment Rules) amend the Private Health Insurance (Data Provision) Rules 2018 (the Rules) to update the information, relating to the treatment received by insured persons, that private health insurers must give to the Secretary of the Department of Health and Aged Care (the Department) under subsection 17210(1) of the Act. 

 

Background

 

The Rules apply and incorporate the following instruments without modifications:

  • the matters contained in the document titled “GT-Dental Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023);
  • the matters contained in the document titled “HCP1 Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023); and
  • the matters contained in the document titled “HCP2 Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023),

 

     from the time the Amendment Rules commence.

 

The documents referred to above can be accessed on the Department’s website using the following link: https://www.health.gov.au/resources/collections/hospital-data-resources.

 

Data specifications are reviewed routinely every year by the Department. Following consultation with external stakeholders, changes are generally introduced effective 1 July in each financial year.

Changes to the 2023/24 data specifications are designed to align with national metadata standards published in METeOR, the Australian Institute of Health and Welfare’s Metadata online registry, and to improve data quality.

Supply of the GT-Dental Data, HCP1 Data and HCP2 Data involves private health insurers disclosing to the Department de-identified information about the treatment received by insured patients. This information is protected by subsection 323-1(1) of the Act, which makes it an offence to disclose the information where the disclosure is not authorised by the Act. The Act allows for a limited set of circumstances to be considered as authorised disclosures, one of which is to enable a person to perform functions in connection with a Medicare program (paragraph 323-5(b)). The collective effect of these provisions limit the purposes for which protected information may be used or disclosed.

Commencement

The Amendment Rules commence on 1 July 2023.

Consultation

 

The Department has consulted with private health insurers and the hospital sector (private and public) about the Amendment Rules through existing working group arrangements. The working groups are comprised of representatives from the Department and industry stakeholders. Feedback received from industry is that it is appropriate for amendments to be managed by the existing working group arrangements. Previous amendments to the data specifications have also been managed in this way. The amended data specifications are distributed to industry via a Private Health Insurance Circular published by the Department. Private Health Insurance Circulars can be accessed at the following link: https://www.health.gov.au/news/phi-circulars.

 

The Amendment Rules are a legislative instrument for the purposes of the Legislation Act 2003.

 


Attachment

 

Details of the Private Health Insurance (Data Provision) Amendment Rules 2023

Section 1         Name

Section 1 provides that the name of the instrument is the Private Health Insurance (Data Provision) Amendment Rules 2023.

 

Section 2         Commencement

Section 2 provides that the instrument commences on 1 July 2023.

Section 3         Authority

Section 3 provides that the Amendment Rules are made under section 333-20 of the Private Health Insurance Act 2007.

Section 4         Schedules

Section 4 provides that each instrument that is specified in a Schedule to the instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to the instrument has effect according to its terms.

Schedule 1—Amendments

Private Health Insurance (Data Provision) Rules 2018

Item 1 repeals the existing definition of GT-Dental Data from Insurers to the Department and then substitutes a new definition of GT-Dental Data from Insurers to the Department. The new definition of GT-Dental Data from Insurers to the Department means the protocol set out in the document approved by the Assistant Secretary of the Data and Analytics Branch of the Department of Health and Aged Care on 21 June 2023 which consists of “Data Specifications (GT-Dental)” and “Explanatory Notes (GT-Dental)”.

Item 2 repeals the existing the definition of HCP1 Data from Insurers to the Department and then substitutes a new definition of HCP1 Data from Insurers to the Department. The new definition of HCP1 Data from Insurers to the Department means the protocol set out in the document approved by the Assistant Secretary of the Data and Analytics Branch of the Department of Health and Aged Care on 21 June 2023 which consists of “Data Specifications (HCP1)” and “Explanatory Notes (HCP1)”.

Item 3 repeals the existing definition of HCP2 Data from Insurers to the Department and then substitutes a new definition of HCP2 Data from Insurers to the Department. The new definition of HCP2 Data from Insurers to the Department means the protocol set out in the document approved by the Assistant Secretary of the Data and Analytics Branch of the Department of Health and Aged Care on 21 June 2023 which consists of “Data Specifications (HCP2)” and “Explanatory Notes (HCP2)”. 

Statement of Compatibility with Human Rights

Prepared in accordance with Part 3 of the Human Rights (Parliamentary Scrutiny) Act 2011

 

Private Health Insurance (Data Provision) Amendment Rules 2023

This Disallowable Legislative Instrument is compatible with the human rights and freedoms recognised or declared in the international instruments listed in section 3 of the Human Rights (Parliamentary Scrutiny) Act 2011.

 

Overview of the Disallowable Legislative Instrument

Private Health Insurance (Data Provision) Rules provide for matters required or permitted by Part 45 of the Private Health Insurance Act 2007 (the Act), or necessary or convenient in order to carry out of give effect to Part 4-5 of the Act.

The Private Health Insurance (Data Provision) Amendment Rules 2023 (the Amendment Rules) amend the Private Health Insurance (Data Provision) Rules 2018 (the Rules) to update the information, relating to the treatment received by insured persons, that private health insurers must give to the Secretary of the Department of Health and Aged Care (the Department) under subsection 172-10(1) of the Act.

The Rules apply and incorporate the following instruments without modifications:

  • the matters contained in the document titled “GT-Dental Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department) on 21 June 2023;
  • the matters contained in the document titled “HCP1 Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023); and
  • the matters contained in the document titled “HCP2 Data from Insurers to the Department”, (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023),

 

from the time the Amendment Rules commence.

 

The Amendment Rules will commence on 1 July 2023.

 

These documents can be found on the Department’s website using the following link: https://www.health.gov.au/news/phi-circulars.

Human rights implications

The Amendment Rules engage the human right to privacy under Article 17 of the International Covenant on Civil and Political Rights, but does not result in any limitation of that right.

Supply of the GT-Dental Data, HCP1 Data and HCP2 Data involves private health insurers disclosing to the Department de-identified information about the treatment received by insured patients. This information is protected by subsection 323-1(1) of the Act, which makes it an offence to disclose the information where the disclosure is not authorised by the Act. The Act allows for a limited set of circumstances to be considered as authorised disclosures, one of which is to enable a person to perform functions in connection with a Medicare program (paragraph 323-5(b)). The collective effect of these provisions limit the purposes for which protected information may be used or disclosed.

Conclusion

The Amendment Rules are compatible with human rights as although it engages the right to privacy in relation to the disclosure of personal information, it does not derogate from that right.

 

Kayla Jordan

 Assistant Secretary

Data and Analytics Branch

Department of Health and Aged Care

 

 

Overview

The Private Health Insurance (Data Provision) Amendment Rules 2023 were introduced to update the information that private health insurers must provide to the Secretary of the Department of Health and Aged Care. Enacted by the Minister of Health and Aged Care under the authority granted by the Private Health Insurance Act 2007, these Amendment Rules amend the existing Private Health Insurance (Data Provision) Rules 2018. The purpose of these amendments is to align with national metadata standards and improve data quality by incorporating updated data specifications for GT-Dental, HCP1, and HCP2 data. The rules ensure that the de-identified information about treatment received by insured patients, which is protected by the Act, is disclosed only for authorised purposes such as enabling functions connected with the Medicare program. The Amendment Rules commenced on 1 July 2023, following consultation with private health insurers and the hospital sector through existing working group arrangements.

Scope and Application

The Private Health Insurance (Data Provision) Amendment Rules 2023 apply to private health insurers operating within Australia, mandating them to provide updated information on the treatment received by insured individuals to the Secretary of the Department of Health and Aged Care. These Amendment Rules are an extension of the Private Health Insurance (Data Provision) Rules 2018, which are themselves governed by Part 4-5 of the Private Health Insurance Act 2007. The Amendment Rules are designed to ensure that the information provided is aligned with national metadata standards and improved data quality, as specified in the Australian Institute of Health and Welfare’s Metadata online registry (METeOR). Effective from 1 July 2023, the Amendment Rules incorporate specific data protocols approved by the Assistant Secretary of the Data and Analytics Branch of the Department of Health and Aged Care on 21 June 2023, which detail the data specifications for GT-Dental Data, HCP1 Data, and HCP2 Data. These data specifications are made available on the Department's website and are distributed to industry stakeholders via Private Health Insurance Circulars. The Amendment Rules ensure that the data provided is de-identified and protected under subsection 323-1(1) of the Act, with authorised disclosures limited to purposes such as enabling functions related to Medicare programs.

Key Provisions

The Private Health Insurance (Data Provision) Amendment Rules 2023 (the Amendment Rules) amend the Private Health Insurance (Data Provision) Rules 2018 (the Rules) to update the information that private health insurers must provide to the Department of Health and Aged Care (the Department) under subsection 172-10(1) of the Private Health Insurance Act 2007 (the Act). These amendments concern the information about the treatment received by insured persons, specifically GT-Dental Data, HCP1 Data, and HCP2 Data. These data sets are defined in the amendment to reflect updated protocols approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 21 June 2023. The Amendment Rules incorporate these updated protocols without modifications, ensuring that the data specifications align with national metadata standards and improve data quality. Private health insurers are required to supply de-identified information to the Department in accordance with the updated data specifications. This data must be provided in the format and detail as specified in the approved documents, which are available on the Department's website. The obligations under these rules mandate that insurers adhere strictly to the new data specifications to ensure consistency and accuracy in the information provided. Insurers must ensure that the data they supply is de-identified and protected, as unauthorised disclosure of such information is an offence under the Act. Failure to comply with the data provision requirements can result in significant legal consequences. Under subsection 323-1(1) of the Act, unauthorised disclosure of the protected information is an offence, with potential penalties for non-compliance. The specific penalties for breaches are not detailed in the Amendment Rules themselves but would be governed by the broader provisions of the Act and any applicable regulations. It is important for insurers to understand that the data they provide must strictly adhere to the updated specifications and any unauthorised disclosure can lead to enforcement actions by the Department.

Legal classification tags

Area of Law
Privacy Law
Health Law
Instrument
Regulation
Concepts
Definitions & Interpretation
Reporting & Disclosure Obligations
Compliance Obligations

Interactions

Authorises

All Versions

Sourced from the Federal Register of Legislation at 26 August 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au.