If your application to access and manage your child’s My Health Record is successful, you will become their ‘authorised representative’ in the My Health Record system. You will get access to a secure online summary of their key health information and can provide access to healthcare organisations involved in their care. As an authorised representative, you must act in accordance the will and preferences of your child.
As part of your application to access and manage your child’s My Health Record, you will need to provide information about yourself and your child so that we know who you are and so we can work out whether you can be your child’s authorised representative.
The information you provide will be collected by the My Health Record System Operator (who is the Secretary of the Department of Health and Ageing) and shared with the Healthcare Identifiers service operator and other Commonwealth agencies to verify your and your child’s identity.
We will also collect personal information about you and your child – for example, date of birth and address – from other Commonwealth agencies (such as Chief Executive Medicare) to verify your identity and maintain the My Health Record system.
This collection and disclosure of information is authorised under the My Health Records Act 2012 and the Healthcare Identifiers Act 2010.
The My Health Record System Operator will collect and include in your child’s My Health Record personal and health information about them which is uploaded by healthcare providers or by you. Your child’s information may be disclosed to people or organisations that are registered to participate in the My Health Record system (including healthcare organisations as well as government and private sector organisations which deliver the technical components of the system), all of whom are subject to strict laws and regulations.
In the application process
We will use the personal information we collect from you and others for registration, administration, maintenance, monitoring and population of your child’s My Health Record. We will also use your and your child’s personal information to administer the My Health Record system more broadly. This would include, for example, monitoring the security, integrity and efficiency of the system.
We use private sector firms to help deliver the My Health Record system. They will see, use and disclose, and in some cases store, your and your child’s personal information as part of this work. These firms are required to treat your and your child’s information with the same level of respect, privacy and security as we are.
We will disclose information about you and your child to the Department of Human Services and the Department of Veterans’ Affairs, in order to verify the accuracy of information you supply with your application. This includes information necessary to verify your and your child’s identity and your consent to include information held by Chief Executive Medicare in your child’s My Health Record.
Once you get access
Once your child is registered, the kinds of information collected directly from you may include:
- details that allow us to identify and contact you and them;
- details about medical conditions your child has which you decided to upload to and publish in the My Health Record;
- details about your child’s health which you enter in the confidential health diary feature;
- information about how you want to manage your child’s My Health Record, including who you want to have access to your child’s record and other access controls;
- records uploaded to your child’s My Health Record; and
- information about your access to your child’s My Health Record.
We will disclose your child’s My Health Record to their representatives and to the healthcare provider organisations involved in their care that are registered with the My Health Record system, in accordance with the access controls for your My Health Record, or in a medical emergency.
Healthcare provider organisations sometimes use private sector firms to help them with computer and IT-related services (‘contracted service providers’). If a registered contracted service provider is authorised by a healthcare provider organisation to connect to the My Health Record system on its behalf, then we will disclose your and your child’s information to the contracted service provider (if the healthcare provider organisation is authorised by you to access this information). A contracted service provider may only register with the My Health Record system if it agrees to meet proper security and privacy standards when connecting to the My Health Record system.
We will disclose your and your child’s information to the organisations that hold documents in storage for the My Health Record system and make them available when they are requested (repository operators), for the purpose of storing, indexing and calling for records about you which form part of your child’s My Health Record.
There are some circumstances where the My Health Records Act 2012 authorises the collection, use and disclosure of health information without consent. The circumstance in which this occurs is likely to occur when there is a serious threat to the life, health or safety of an individual and the person is unable to consent to their information being accessed and used. Other circumstances are set out in the My Health Records Act 2012.
Read the full Privacy Statement.
How the My Health Record system puts you at the centre of your healthcare
The My Health Record system has been carefully designed to give you choices about how your child’s health information is handled. Once you have registered your child, you will be able to decide whether all or just some of the healthcare providers involved in their care can access your child’s My Health Record or specific documents within it.
In rare cases, there may be information about your child's health that you don’t want to be available on your child's My Health Record. If so, you can:
- ask your child’s healthcare provider not to add it to your child’s record, and they must comply with this request; or
- remove specific health information from your child’s record, in which case the information will not be available to your child’s healthcare providers, but will continue to be stored by System Operator. You can choose to add the information back into your child’s record at any time.
If you limit access to your child’s My Health Record or a document within it, emergency access rules permit registered healthcare provider organisations to get access for a limited time in a medical emergency.
Most people are likely to allow any healthcare provider organisation involved in their care to access their My Health Record. This is the default access control setting that will apply to all My Health Records from registration. However, you can set access controls for your child’s My Health Record by:
- limiting access to the whole of the My Health Record – if you do this you will need to provide an access code to those healthcare providers you wish to access the My Health Record; or
- limiting access to a specific document in the My Health Record – if you do this, you will need to give a healthcare provider an access code before they can see that specific document.
Information that is uploaded to the My Health Record system will be stored in repositories. Repositories are operated by a variety of public and private sector organisations that are registered to participate in the My Health Record system and who must comply with strict rules to protect the security and privacy of information. However, some of your child’s key health information will be stored by the System Operator in the National Repositories Service (NRS) – for example, if your child’s has a shared health summary or if you have uploaded information on allergies, these will be stored in the NRS. Information uploaded to the NRS will be retained until at least 30 years after the date of your child’s death, or if the system operator does not know this date 130 years after the information was uploaded.
To register for a My Health Record, you need to create a myGov account or log in to your existing myGov account.
Note: to access the myGov system please ensure you have a supported web browser (see compatible browsers).
If you already have an australia.gov.au account, your myGov account will be automatically created.