My Health Record Deadline for Transport Layer Security v1.2

The Australian Digital Health Agency (ADHA) will be decommissioning Transport Layer Security (TLS) v1.0 and all non‑compliant cipher suites on 31 March 2026.

Transport Layer Security is a protocol designed to facilitate privacy and data security for communications over the Internet facilitates security and privacy.

To maintain access to My Health Record and ensure patient information remains safe and secure, all general practices must update their systems to TLS v1.2 with compliant cipher suites before the deadline.

While TLS v1.2 has been available since 2008 and vast majority of general practices would comply with the required TLS version, recent checks by ADHA indicate that some practices may still be using outdated server configurations or older Windows Server versions that do not support the required security settings. These systems will lose access to My Health Record after 31 March unless updated.

We encourage you to review your current setup as soon as possible and complete any required upgrades. If your practice uses external IT support or relies on a software vendor, please contact them promptly to confirm your compliance status.

Key Date

• 31 March 2026 – Final deadline to transition to TLS v1.2 and compliant cipher suites
  • After this date, My Health Record access will be disconnected until compliance is achieved

Why This Matters

• Protects patient data using modern, secure encryption
• Prevents service interruptions that may affect clinical workflows
• Maintains a safe and reliable digital health environment for clinicians and patients

If you need support or have questions about the upgrade, please contact your software vendor or your IT support.

Thank you for taking action to help maintain a secure and trusted digital health system for your community.