Privacy Collection Notice - Registering for a My Health Record
- This Privacy Collection Notice applies if you are applying to be registered for a My Health Record for you and, if relevant, your dependant(s). In this notice, unless otherwise indicated:
- references to “you” include references to your dependant, if relevant; and
- references to “your My Health Record” and “your personal information” include references to your dependant’s My Health Record and your dependant’s personal information respectively, if relevant.
- If you apply to register yourself for a My Health Record, we will collect, use and disclose personal information about you for the following purposes:
a. to ensure that we accurately identify you;
b. to check whether a My Health Record already exists for you;
c. to create a My Health Record for you;
d. to link your My Health Record to a myGov account (an account that provides a simple way to access government online services);
e. to include Medicare information in your Record if you wish to have that information included in your Record or if you live in a ‘opt-out’ trial area (currently Northern Queensland and Nepean/Blue Mountains) and don’t tell us otherwise. Where held by Medicare, this may include Medicare Benefits (MBS), Pharmaceutical Benefits (PBS), Australian Organ Donor Register and immunisation information (Medicare information); and
f. to include health information uploaded by you, and treating healthcare providers, to your My Health Record.
3. We will collect personal information about you, including your name, address, date of birth, gender, and Medicare number, Department of Veterans’ Affairs (DVA) file number (if relevant) or, if you know it, your Individual Healthcare Identifier (IHI).
4. We collect this information from you, Medicare, DVA (if relevant) and the Healthcare Identifiers Service (operated by Chief Executive Medicare). Without the information we will not be able to create a My Health Record for you.
5. As part of verifying identities and creating a My Health Record for you, we disclose personal information to Medicare, DVA (if relevant) and the Healthcare Identifiers Service.
6. Once your My Health Record is created and you would like to access your My Health Record online, you will need to prove your identity. To do this, we will ask you a series of identity questions such as the date of birth of people on your Medicare card or information relating to your Medicare or DVA claims history. We will collect your answers and disclose them to Medicare or DVA (if relevant) to confirm your identity. Once we have verified your identity, we will be able to link your new My Health Record to a myGov account. Without your answers, we will not be able to link you to a myGov account and you will not be able to access your new My Health Record online. The information we collect to verify your identity is not retained after we link a myGov account to your My Health Record, and we do not disclose this information to anyone else.
7. If you consent, or you live in an ‘opt-out’ trial area and don’t tell us otherwise, we will include up to two years of past Medicare information in your My Health Record. We will also include new Medicare information in your My Health Record from time-to-time as it becomes available to Medicare. Please note that this information could indicate diagnosed conditions or genetic information. You can control who has access to this information by setting access controls, if you wish. If you do not set access controls, any healthcare provider who treats you and who is registered with the My Health Record system will be able to view your Medicare information. You can change your mind at any time and stop, or restart, the flow of Medicare information into your My Health Record. If your Medicare information is not included in your My Health Record, the information will not be available to healthcare providers who are treating you. If you are registering your dependant(s) for a My Health Record, please note that in accordance with the current Chief Executive Medicare policy, you will not be able to set Medicare preferences for dependants aged between 14-17 years old.
8. Once your My Health Record has been created, treating healthcare providers may upload health and related personal information about you to your My Health Record. We will collect, use and disclose this information as part of operating the My Health Record system. If you do not want a particular document uploaded, tell your healthcare provider – they must comply with your wishes. You can control who has access to your My Health Record by setting access controls, if you wish. If you do not set access controls, healthcare providers who treat you and who are registered with the My Health Record system will be able to view documents that have been uploaded by your other healthcare providers.
9. Once your My Health Record has been created and you access it online, you may choose to answer whether you are of an Aboriginal and/or Torres Strait Islander origin. We will collect this information and disclose it anonymously to the Department of Health (Health) to assist in the planning and provision of appropriate and improved healthcare and services. If you do not answer, your My Health Record will show “not stated”. Without this information we will not be able to disclose it to Health to help inform policy.
10. The collection, use and disclosure of your personal information to verify your identity and create a My Health Record is authorised under the My Health Records Act 2012, Healthcare Identifiers Act 2010 and Privacy Act 1988.
11. We will not disclose health or other personal information about you overseas (although you and your healthcare provider can securely access your My Health Record while overseas, if necessary).
If you need further information please contact us.