Assisted Registration - Essential Information
A healthcare provider organisation can assist you to register for a My Health Record and must follow certain rules in doing so. This is called assisted registration. The person assisting you is not acting as an agent, or on behalf, of the My Health Record System Operator (the Australian Digital Health Agency).
Before you complete the assisted registration application form, please read the below information to find out how you can manage your My Health Record and the Privacy Collection Notice to find out how we (the My Health Record System Operator) handle your personal information that we collect in the assisted registration process.
Managing your My Health Record
Once you have completed the assisted registration process and you have been registered for a My Health Record you will be able to decide who can access your personal information.
In rare cases, there may be information about your health that you don’t want available on your My Health Record. If so, you can:
- ask your healthcare provider not to add it to your record, and they must comply with this request; or
- remove specific health information from your record.
If you limit access to your My Health Record or a document within it, emergency access rules permit registered healthcare provider organisations to get access for a limited time in a medical emergency.
You can also control who has access to your My Health Record by setting access controls, if you wish. You can set access controls for your My Health Record by:
- limiting access to the whole of the My Health Record; or
- limiting access to a specific document in a My Health Record.
If you do not set access controls, healthcare providers who treat you and who are registered with the My Health Record system will be able to view documents that have been uploaded by your other healthcare providers.
For more information on how you can manage your My Health Record please visit My Health Record website.
Privacy Collection Notice
- If a healthcare provider is assisting you to register you and your dependants (if relevant) for a My Health Record, we will collect, use and disclose personal information about you, and your dependants (if relevant), for the following purposes:
- to ensure that we accurately identify you and your dependants;
- to check whether a My Health Record already exists for each of you;
- to create a My Health Record for each of you;
- to link your My Health Record to a myGov account; and
- to include Medicare information in your Record if you wish to have that information included in your Record or if you live in a trial area (currently Northern Queensland and Nepean/Blue Mountains), and don't tell us otherwise. Where held by Medicare, this may include Medical Benefits Schedule (MBS) claims, Pharmaceutical Benefits Scheme (PBS) claims, Australian Organ Donor Register and immunisation information.
- We will collect personal information about you, and your dependants (if relevant), including name, address, date of birth, gender, and Medicare number, Department of Veterans; Affairs (DVA) file number (if relevant) or, if you know it, your Individual Healthcare Identifier (IHI).
- We collect this information from you (where you provide it on the application form), the healthcare provider that is assisting you to register, Medicare, DVA (if relevant), and the Healthcare Identifiers Service (operated by Chief Executive Medicare). Without the information we will not be able to create a My Health Record for you.
- As part of verifying identities and creating a My Health Record for you, and your dependant (if relevant), we disclose personal information to Medicare, DVA (if relevant) and the Healthcare Identifiers Service.
- If a healthcare provider is assisting you to register your child, we will also collect from you, or the healthcare provider assisting you to register, the number on your Medicare card associated with your dependant and will disclose that number to Medicare to confirm your relationship with your dependant. We will also collect from your healthcare provider a declaration that supports your assertion that you have parental responsibility of the relevant child.
- We also collect information about your claims history from Medicare, or DVA (if relevant). We use this information to ask you questions to verify your identity. Once we have verified your identity, we will be able to link your new My Health Record to a myGov account. Without your claims information, we will not be able to link you to a myGov account and you will not be able to access your new My Health Record online. The claims information we collect to verify your identity is not retained after we link a myGov account to your My Health Record, and we do not disclose this information to anyone. If you consent, or you live in an opt-out trial area and don’t tell us otherwise, we will include up to two years of past Medicare information in your new My Health Record. We will also include new Medicare information in your My Health Record from time-to-time as it becomes available to Medicare. You can control who has access to this information by setting access controls, if you wish. If you do not set access controls, any healthcare provider who treats you and who is registered with the My Health Record system will be able to view your Medicare information. You can change your mind at any time and stop, or restart, the flow of Medicare information into your My Health Record. If your Medicare information is not included in your My Health Record, the information will not be available to healthcare providers who are treating you. If you are registering your dependant(s) for a My Health Record, please note that in accordance with the current Chief Executive Medicare policy, you will not be able to set Medicare preferences for dependants aged between 14-17 years old
- If you choose to answer, we will collect whether you are of an Aboriginal and/or Torres Strait Islander origin. This information will be disclosed anonymously to the Department of Health (Health) to assist in the planning and provision of appropriate and improved healthcare and services. If you do not answer, your My Health Record will show “not stated”. Without this information we will not be able to disclose it to Health to help inform policy..
- Once your My Health Record has been created, treating healthcare providers may upload health and related personal information about you to your My Health Record. We will collect, use and disclose this information as part of operating the My Health Record system. If you do not want a particular document uploaded, tell your healthcare provider – they must comply with your wishes. You can control who has access to your My Health Record by setting access controls, if you wish. If you do not set access controls, healthcare providers who treat you and who are registered with the My Health Record system will be able to view documents that have been uploaded by your other healthcare providers.
- The collection, use and disclosure of your and your dependants’ personal information to create a My Health Record is authorised under the My Health Records Act 2012, Healthcare Identifiers Act 2010 and Privacy Act 1988.
- We will not disclose health or other personal information about you or your dependants overseas (although you and your healthcare provider can securely access your My Health Record while overseas, if necessary).
- We can be contacted by calling 1800 723 471 (select option 1), by visiting your nearest Medicare service centre or in writing [Privacy Officer, My Health Record system, GPO Box 9942 (In Your Capital City)]