My Health Record Rule 42 Compliance
The AMA would like to remind members of the importance of compliance with the privacy regulations for the My Health Record system.
![](/sites/default/files/styles/limit_height/public/2022-10/online%20medical%20records%20970%20x%20440.jpg?itok=ww9fXoYQ)
Rule 42 of the My Health Records Rule 2016 requires healthcare provider organisations to have, communicate and enforce a written policy addressing a range of prescribed matters. This is commonly referred to as a My Health Record security and access policy.
To assist healthcare provider organisations, the Australian Digital Health Agency has developed a number of education resources to support healthcare provider organisations to comply with Rule 42, including the recently released eLearning module specifically concerning developing a My Health Record security and access policy. To access the eLearning module, along with a range of other training resources, healthcare providers can register for a free account here.
The Agency also runs regular webinars and virtual classroom sessions outlining how to develop a My Health Record security and access policy.
More recently, the Agency developed a policy template that should assist healthcare providers to comply with their obligations under Rule 42. The policy template is available on the OAIC website.