The Office of the Australian Information Commissioner (OAIC), in partnership with the Australian Digital Health Agency (ADHA), have released an updated My Health Record System Security and Access Policy template to assist healthcare provider organisations with meeting their obligations under the revised My Health Record Rules 2026.
From 1 October 2026, all healthcare provider organisations registered with My Health Record System must comply with the MHR System Security and Access Policy requirements set out in rules 21 and 43 of My Health Record Rules 2026. These requirements replace security and access policy requirements previously set out in rule 42 of My Health Records Rules 2016.
The My Health Record Regulations 2026 and Rules 2026 commenced on 1 April 2026, updating and simplifying requirements for providers while maintaining existing privacy and security protections and enhancing user access governance, training requirements and risk controls.
All organisations accessing My Health Record must maintain:
The following information developed by the Australian Digital Health Agency can assist organisations in updating their policy in accordance with the new requirements:
My Health Record participation obligations (download the ADHA template)
Fact Sheet Revised Security and Access Policy Requirements for Healthcare Provider Organisations
My Health Record: Organisation Registration Check List
My Health Record for Healthcare Providers Education and Resources
For additional information please contact CESPHN digital health team on digitalhealth@cesphn.com.au
Immunisation Weekly Update: Welcome to our weekly Immunisation Update! In this week’s update, read about: Measles alert; ensure patients are travel ready CESPHN webinar; Immunisation without borders MenB Causes Most Invasive Meningococcal Disease Cases in Australia Education Measles Alert: Ensure Patients Are Travel-Ready Healthcare providers are reminded to use upcoming…
Immunisation Weekly Update: Welcome to our weekly Immunisation Update! In this week’s update, read about: COVID-19 vaccination in 2026: preparing for the transition to the National Immunisation Program (NIP) Webinar COVID-19 vaccine stock RSV now Australia’s most notified respiratory virus: a timely reminder to check vaccine status Education COVID-19 vaccination…
Immunisation Weekly Update: Welcome to our weekly Immunisation Update! In this week’s update, read about: Transition of COVID-19 vaccines to the NIP Hep B vaccine eligibility No link between vaccines and autism Expansion of the NIP Vaccinations in Pharmacy Program to include children under 5 years National Vaccination Insights project…
Have you filled in CESPHN’s Stakeholder Survey? Help us find out more about how we can support you in 2027.
Take the survey (opens in new tab)
