My Health Record legislation updates
The My Health Records Regulations 2026 and My Health Records Rules 2026 came into effect on 1 April 2026.
Allied health providers should be aware of the following requirements when accessing My Health Record:
Security and access policy: Practices must have a written policy in place to access My Health Record. Support and templates are available from the Australian Digital Health Agency (ADHA).
User accounts log: Maintain a record of all user account activity, including creation, suspension and deactivation. Records must be kept for 5 years.
Staff training records: Staff must understand privacy requirements, with training provided at induction, annually and following major system changes. Records must also be retained for 5 years. ADHA training modules and fact sheets are available to support this.
Compliance timeframes:
Registered before 1 April 2026: six‑month transition period (until 1 October 2026)
Registered after 1 April 2026: must comply immediately
The Department of Health, Disability and Ageing has published FAQs on the updated regulations and rules.