Managing access, privacy and security
A Personal Access Code (PAC) is a code generated by you in the My Health Record system that you can give to your Nominated Representative and/or Full Access Nominated Representative to access your My Health Record.
A PAC expires 30 days after being generated and can only be used once. You can regenerate a code if the appointed Nominated Representative or Full Access Nominated Representative has not used the PAC to access your record before the expiry date.
You will need to generate a PAC every time you appoint a different Nominated Representative or a Full Access Nominated Representative to your record.
To access your My Health Record, you will need to use the myGov username and password that you will have created during your application if you registered online. If you don’t have a myGov account, you will need to create one to access your My Health Record online. Your myGov username and password are only known by you and should be kept secret.
If you forget your login details, you will need to create a new account through myGov and link it to your My Health Record. If you forget your password you can create a new one online (after your identity is verified).
If you don’t have internet access, you can call the My Health Record helpline on 1800 723 471 to access your information. The helpline will be able to tell you the documents that are in your My Health Record, but not what each document contains.
You are able to monitor who has accessed or updated your My Health Record through the access history. This feature shows information regarding:
- Date and time the My Health Record was accessed
- Organisation that accessed it
- Circumstances surrounding access (for example: in an emergency)
- Details of actions that occurred during access
The access history can be obtained either online or by calling the System Operator on 1800 723 471.
You can control who accesses the information in your My Health Record. Access controls that are available include:
- Setting a record access code (a code you give to your healthcare providers to allow them to view your record, and prevent other healthcare providers from access unless in an emergency)
- Flagging specific documents in your record as ‘limited access’, and controlling who can view these documents
Authorised representatives and full access nominated representatives also have the ability to change the access controls of your My Health Record. Only your healthcare provider has the ability to upload clinical information into your My Health Record. There is also a section of private notes that is only accessible to you or an authorised or nominated representative.