Healthcare organisations registered with My Health Record will need to comply with updated security and access policy requirements from 1 October.
The Office of the Australian Information Commissioner (OAIC), working with the Australian Digital Health Agency, has released an updated My Health Record Security and Access Policy Template to help organisations comply with the My Health Records Rules 2026.
From 1 October, healthcare provider organisations registered with My Health Record must comply with requirements under rules 21 and 43 of the new rules.
The requirements replace provisions previously contained in rule 42 of the My Health Records Rule 2016.
The updated template and supporting guidance are intended to help healthcare organisations review and update their security and access policies and meet their ongoing My Health Record participation obligations.
The Australian Digital Health Agency has also released a fact sheet outlining changes organisations should consider when reviewing their existing policies.
Healthcare provider organisations have been advised to review and update their security and access policies before the new requirements come into effect.
Add Comment