My Health Record Rule 42 Compliance
The AMA would like to remind members of the importance of compliance with the privacy regulations for the My Health Record system.
Rule 42 of the My Health Records Rule 2016 requires healthcare provider organisations to have, communicate and enforce a written policy addressing a range of prescribed matters. This is commonly referred to as a My Health Record security and access policy.
To assist healthcare provider organisations, the Australian Digital Health Agency has developed a number of education resources to support healthcare provider organisations to comply with Rule 42, including the recently released eLearning module specifically concerning developing a My Health Record security and access policy. To access the eLearning module, along with a range of other training resources, healthcare providers can register for a free account here.
The Agency also runs regular webinars and virtual classroom sessions outlining how to develop a My Health Record security and access policy.
More recently, the Agency developed a policy template that should assist healthcare providers to comply with their obligations under Rule 42. The policy template is available on the OAIC website.
