Start of content

These simple tips can help you set up your My Health Record access controls.

Access control settings

You can maintain privacy and control access to a My Health Record by adjusting the settings for:

  • individuals – allowing people you trust such as family members, friends or carers to view and help manage the information 
  • healthcare providers – changing the default setting to apply restrictions for an entire healthcare organisation
  • documents – restricting access to specific documents relating to visits to healthcare providers, or medicines that you are taking or have taken.

You can also restrict access to clinical documents that you consider sensitive, or all or specific types of Medicare documents. 

Setting codes

To customise security and privacy controls, you can change the level of access to your information by setting one or more codes:

  1. Record Access Code (RAC) – provided by you, only to healthcare professionals you want to access your record.
  2. Limited Document Access Code (LDAC) – provided by you, to healthcare professionals you want to access specific documents, when you have chosen to limit access to these documents.
  3. Personal Access Code (PAC) – provided by you, to your nominated representative to enable them to access your My Health Record.

Setting a Record Access Code

To control which healthcare providers can access a My Health Record, set a Record Access Code (RAC) and then give it to the healthcare providers that you would like to have access to your record:

  1. Log in to your My Health Record through myGov.
  2. Click the 'Privacy and Access' tab.
  3. Select 'Manage Access by Healthcare Providers'.
  4. Set a 4-8 digit code and give it to your healthcare provider(s).

Setting a Limited Document Access Code

To restrict access to particular documents, set a Limited Document Access Code (LDAC), which you can give to your healthcare providers:

  1. Log in to your My Health Record through myGov.
  2. Click the 'Privacy and Access' tab.
  3. Select 'Document Access Settings'.
  4. Set a 4-8 digit code and give it to your healthcare provider(s).

If you forget your code, you can re-enter and validate a new code at any time. You will only need to provide the new code to those healthcare providers that have not previously had access to your My Health Record.

Removing information

You are able to remove clinical and/or Medicare documents from a My Health Record. It is important to understand that clinical documents you remove will not be accessible, even in an emergency. If you change your mind, or remove a document by mistake, you can choose to restore the document.

To remove a document from your record, follow these step-by-step instructions

Giving access to a nominated representative

Your nominated representative will require a Personal Access Code (PAC) to confirm they are a person you want to access your My Health Record.

See the step-by-step instructions on giving access to a nominated representative.

Withdrawing participation from secondary uses of data

The Australian Government has developed the Framework to guide the secondary use of My Health Record System data (the framework) to inform Australians how My Health Record data can be used for research and public health purposes.

People with a My Health Record will be able to choose not to have their data used for secondary use purposes by selecting the ‘withdraw participation’ function in their My Health Record.

The ‘withdraw participation’ function will be added to the My Health Record system well ahead of the commencement of the national opt out period. The release of data for secondary purposes is expected to commence from 2020.

Further information about the framework is available on the Department of Health website.