Private Health Insurance (Health Insurance Business) Amendment Rules 2021

Administered by Department of Health, Disability and Ageing

Legislation au F2021L00109 Rules Not in force Legislative Instrument

Legislation content

EXPLANATORY STATEMENT

 

Private Health Insurance Act 2007

 

Private Health Insurance (Health Insurance Business) Amendment Rules 2021

 

Authority

 

Subsection 333-20(1) of the Private Health Insurance Act 2007 (the Act) authorises the Minister of Health (the Minister) to, by legislative instrument, make Private Health Insurance Rules. The types of rules are specified in the second column of the table provided in subsection 333-20. In particular, item 6 of the table authorises the Minister to make Private Health Insurance (Health Insurance Business) Rules providing for matters required or permitted by Part 4-2 of the Act, or necessary or convenient in order to carry out or give effect to Part 4-2 of the Act. Part 4-2 defines the key concept of health insurance business and provides for associated requirements.

 

Subsection 33(3) of the Acts Interpretation Act 1901 provides that where an Act confers a power to make, grant or issue any instrument of a legislative or administrative character (including rules, regulations or by-laws), the power shall be construed as including a power exercisable in the like manner and subject to the like conditions (if any) to repeal, rescind, revoke, amend, or vary any such instrument.

 

Purpose

 

The Private Health Insurance (Health Insurance Business) Amendment Rules 2021 (the Amendment Rules) amends the Private Health Insurance (Health Insurance Business) Rules 2018 (the Rules) to update the kinds of statistical information to be provided by hospitals to private health insurers and by private hospitals to the Department of Health (the Department).

 

Background

 

Subsection 121-5(6) of the Act enables the Minister to make or revoke a declaration that a facility is a public or private hospital for the purposes of the Act. The Act specifies a number of matters to which the Minister must have regard in making or revoking a declaration under section 121-5(6), including whether the facility has entered into or complied with undertakings to provide private health insurers with the kinds of information specified in the Rules relating to the hospital treatment of insured persons under complying health insurance products that are referable to health benefit funds (subsection 121-5(7)(e)). Furthermore, subsection 121-7(2) of the Act enables the Rules to specify conditions to which facilities declared under subsection 121-5(6) are subject. Under rule 7 of the Rules, declared private hospitals are subject to conditions requiring provision of data to the Department. 

 

The Rules apply and incorporate the following instruments without modification:

(i)     The matters contained in the document titled “HCP Data from Hospitals to Insurers” (the HCP document) (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 4 Feb 2021); and

(ii)  The matters contained in the document titled “PHDB Data from Private Hospitals to the Department” (the PHDB document) (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 4 Feb 2021),

 

from the time the Amendment Rules commence.

 

 

The Hospital Casemix Protocol (HCP) and Private Hospital Data Bureau (PHDB) documents, as specified in the Amendment Rules and approved on 4 Feb 2021, replace the documents that were referred to previously in the Rules, and can be found on the Department’s website using the following links – HCP: https://www1.health.gov.au/internet/main/publishing.nsf/Content/health-casemix-data-collections-about-HCP; and PHDB: https://www1.health.gov.au/internet/main/publishing.nsf/Content/health-casemix-data-collections-about-PHDB.

 

Supply of the HCP Data from Hospitals to Insurers involves the disclosure of sensitive personal information, including health information, from hospitals to private health insurers. However the information supplied is provided by hospitals with the patient’s consent as part of the patient’s contractual relationship with their hospital and private health insurer. There are protections for the information provided to insurers under the Privacy Act 1988 and/or state or territory privacy laws. 

 

Supply of the PHDB Data from Private Hospitals to the Department involves the disclosure of de-identified statistical information about the treatment of insured persons, from private hospitals to the Department. The information supplied could not reasonably be used by the Department to identify a patient.  Further, this information is protected by s 323-1(1) of the Act, which makes it an offence to disclose the information where the disclosure is not authorised by the Act.  

 

Data specifications are reviewed routinely every year by the Department. Following consultation with external stakeholders changes are generally introduced effective 1 July in each financial year.

 

Changes to the 2021/22 data specifications are designed to align with national metadata standards published in METeOR, the Australian Institute of Health and Welfare’s Metadata online registry, and to improve data quality.

 

Consultation

 

The Department has consulted with the private health insurance and private hospital industry about the Amendment Rules through existing working group arrangements. Private health insurance and private hospital stakeholder representatives interested in developing the amendments also participated in the process. Feedback received from industry is that it is appropriate for amendments to be managed by the existing working group arrangements. Previous amendments have also been managed in this way. The amended data specifications are distributed to industry via a Private Health Insurance Circular published by the Department. Private Health Insurance Circulars can be accessed at the following link: https://www.health.gov.au/news/phi-circulars

Subsection 115-5(2) of the Act requires that the Minister must consult the Australian Prudential Regulation Authority (APRA) before making the Amendment Rules. The Department consulted APRA by email on 7 Jan 2021.

 

The Amendment Rules are a legislative instrument for the purposes of the Legislation Act 2003. 

 

The Amendment Rules commence on 1 July 2021.

 

Statement of Compatibility with Human Rights

Prepared in accordance with Part 3 of the Human Rights (Parliamentary Scrutiny) Act 2011

 

Private Health Insurance (Health Insurance Business) Amendment Rules 2021

This Disallowable Legislative Instrument is compatible with the human rights and freedoms recognised or declared in the international instruments listed in section 3 of the Human Rights (Parliamentary Scrutiny) Act 2011.

 

Overview of the Disallowable Legislative Instrument

Private Health Insurance (Health Insurance Business) Rules provide for matters required or permitted by Part 4-2 of the Private Health Insurance Act 2007 (the Act), or necessary or convenient in order to carry out or give effect to Part 4-2 of the Act.

 

The Private Health Insurance (Health Insurance Business) Amendment Rules 2021 (the Amendment Rules) amend the Private Health Insurance (Health Insurance Business) Rules 2018 (the Rules) to update the kinds of statistical information to be provided by hospitals to insurers and by private hospitals to the Department of Health (the Department).

 

Under paragraph 121-5(7)(e) of the Act, when making or revoking a hospital declaration the Minister of Health must have regard to whether the facility has entered into or complied with undertakings to provide private health insurers with information specified in the Rules relating to the treatment of insured persons. 

 

The Rules apply and incorporate the following instruments without modification:

(i)     The matters contained in the document titled “HCP Data from Hospitals to Insurers” (the HCP document) (approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 4 Feb 2021); and

(ii)    The matters contained in the document titled “PHDB Data from Private Hospitals to the Department” (the PHDB document) (approved by the Assistant Secretary of the Data and Analytics Branch of the Department 4 Feb 2021),

 

from the time the Amendment Rules commence.

 

The amendments to the Rules requiring that the information requirements set out in those documents to be provided to the insurer or the Department commence on 1 July 2021.

 

The revised Hospital Casemix Protocol (HCP) and the Private Hospital Data Bureau (PHDB)documents as specified in the Amendment Rules and as approved on 4 Feb 2021 can be found on the Department’s website using the following links: HCP: https://www1.health.gov.au/internet/main/publishing.nsf/Content/health-casemix-data-collections-about-HCP; and PHDB: https://www1.health.gov.au/internet/main/publishing.nsf/Content/health-casemix-data-collections-about-PHDB.

 

Human rights implications

The Rules will engage the human right to privacy but will not result in any limitation of that right.

 

Supply of the HCP Data from Hospitals to Insurers involves the disclosure of sensitive personal information of patients, including health information, from hospitals to private health insurers. However the information supplied is provided by hospitals with the patient’s consent as part of the patient’s contractual relationship with their hospital and private health insurer. There are protections for the information provided to insurers under the Privacy Act 1988 and/or state or territory privacy laws.  

 

Supply of the PHDB Data from Private Hospitals to the Department involves the disclosure of de-identified statistical information about the treatment of insured persons, from private hospitals to the Department. The information supplied could not reasonably be used by the Department to identify a patient. Further, this information is protected by s 323-1(1) of the Act, which makes it an offence to disclose the information where the disclosure is not authorised by the Act. 

 

Conclusion

This Disallowable Legislative Instrument is compatible with human rights as although it engages the right of privacy in relation to personal information, it will not result in any limitation of that right.

 

Richard Hurley

 Acting Assistant Secretary

Data and Analytics Branch

Department of Health

Overview

The Private Health Insurance (Health Insurance Business) Amendment Rules 2021, enacted by the Minister of Health under the authority of the Private Health Insurance Act 2007, aims to update the statistical information requirements for hospitals and private health insurers. These amendments respond to the need for more accurate and standardised data to improve the quality of health services and insurance coverage. The rules incorporate the Hospital Casemix Protocol (HCP) and Private Hospital Data Bureau (PHDB) documents, approved on 4 February 2021, which replace previous documents and are designed to align with national metadata standards. The changes are intended to enhance data quality and ensure compliance with privacy laws, while also considering the human rights implications related to the privacy of personal health information. The amendments are set to commence on 1 July 2021.

Scope and Application

The Private Health Insurance (Health Insurance Business) Amendment Rules 2021 amends the existing Private Health Insurance (Health Insurance Business) Rules 2018 to update the statistical information requirements for hospitals and private health insurers. These rules apply to hospitals, both public and private, that provide health services to insured persons under private health insurance arrangements, and to private health insurers that offer health insurance products. The rules specify the type of data hospitals must provide to private health insurers and private hospitals must provide to the Department of Health. These amendments are intended to align with national metadata standards and improve the quality of the data collected. The amendments are in force from 1 July 2021 and include the updated "HCP Data from Hospitals to Insurers" and "PHDB Data from Private Hospitals to the Department" documents, which outline the specific data requirements. The rules are part of the legislative framework under the Private Health Insurance Act 2007 and are designed to support the operation of the private health insurance system in Australia.

Key Provisions

The Private Health Insurance (Health Insurance Business) Amendment Rules 2021 primarily update the kinds of statistical information that hospitals and private hospitals must provide to private health insurers and the Department of Health respectively. These amendments are made under the authority of subsection 333-20(1) of the Private Health Insurance Act 2007 (the Act), which allows the Minister of Health to make rules necessary to implement Part 4-2 of the Act. Specifically, the Amendment Rules incorporate the "HCP Data from Hospitals to Insurers" and the "PHDB Data from Private Hospitals to the Department" documents, which outline the specific data requirements hospitals and private hospitals must meet. These documents were approved by the Assistant Secretary of the Data and Analytics Branch of the Department on 4 February 2021 and are available on the Department’s website. The obligations imposed by these Amendment Rules require hospitals and private hospitals to furnish specified statistical information. For hospitals, this involves disclosing sensitive personal information, including health information, to private health insurers with patient consent, ensuring compliance with privacy laws. Private hospitals must provide de-identified statistical information about the treatment of insured persons to the Department, which cannot reasonably be used to identify patients and is protected under section 323-1(1) of the Act. The information specifications are reviewed annually, with changes generally taking effect from 1 July each financial year. The Amendment Rules also set out clear obligations for the Minister of Health, who must consult with the Australian Prudential Regulation Authority (APRA) before making the Amendment Rules, as required by subsection 115-5(2) of the Act. The consultation process ensures that all relevant parties are informed and can provide feedback on the proposed amendments. Failure to comply with the requirements set out in the Amendment Rules may result in various consequences. Under section 323-1(1) of the Act, unauthorised disclosure of the information provided to the Department is an offence, with potential penalties not explicitly stated in the Amendment Rules but likely subject to the general provisions of the Act or related legislation. Additionally, non-compliance with data provision obligations could lead to regulatory actions, fines, or other administrative penalties as deemed appropriate by the Department or relevant authorities. The precise penalties for non-compliance would depend on the specific breach and relevant legal provisions.

Legal classification tags

Area of Law
Health Law
Privacy Law
Instrument
Regulation
Concepts
Definitions & Interpretation
Reporting & Disclosure Obligations
Privacy Protections

Interactions

Authorises

All Versions

Sourced from the Federal Register of Legislation at 26 August 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au.