Office of the Australian Information Commissioner - Home

Australian Government - Office of the Australian Information Commissioner
Australian Government - Office of the Australian Information Commissioner

Main menu

My Health Records

The My Health Record system is the Australian government’s digital health record system. It contains My Health Records which are online summaries of an individual’s health information, such as medicines they are taking, any allergies they may have and treatments they have received. It was previously known as a Personally Controlled Electronic Health Record (PCEHR) or eHealth record.

A My Health Record allows an individual’s doctors, hospitals and other healthcare providers (such as physiotherapists) to view the individual’s health information, in accordance with their access controls. Individuals are also able to access their record online.

In most parts of Australia individuals need to actively register for a My Health Record. However, people whose registered Medicare address is in Northern Queensland or the Nepean Blue Mountains will have a My Health Record automatically created for them by the Australian Government unless they have opted-out by 27 May 2016.

The My Health Records Act 2012, My Health Records Rule 2016 and My Health Records Regulation 2012 create the legislative framework for the Australian Government’s My Health Record system.

The My Health Records Act limits when and how health information included in a My Health Record can be collected, used and disclosed. Unauthorised collection, use or disclosure of My Health Record information is both a breach of the My Health Records Act and an interference with privacy.

The OAIC’s role in the My Health Record system

The Office of the Australian Information Commissioner (OAIC) regulates the handling of personal information under the My Health Record system by individuals, Australian Government agencies, private sector organisations and some state and territory agencies (in particular circumstances).

The OAIC’s role includes investigating complaints about the mishandling of health information in an individual’s My Health Record. The OAIC can also conduct ‘Commissioner initiated investigations’.

The functions and enforcement powers available to the OAIC under the My Health Records Act and Privacy Act 1988 include:

  • investigating and conciliating complaints
  • accepting enforceable undertakings
  • making determinations
  • seeking an injunction to prohibit or require particular conduct
  • seeking a civil penalty from the Courts
  • accepting mandatory data breach notifications from the System Operator, health care provider organisations, repository operators and portal operators


If an individual thinks that information in their My Health Record has been mishandled, they should first complain to the healthcare provider or other entity that they think is at fault. If they are not satisfied with the response, an individual can complain to the System Operator (via the Medicare Call Centre: 1800 723 471), the OAIC or the state and territory regulator (if the healthcare provider is a state or territory entity).

To complain to the OAIC about the handling of a My Health Record, go to the Individuals section of this website.

Where can you get more information?

For more information about healthcare providers’ responsibilities under the My Health Record system, and the OAIC’s role as the independent regulator of the privacy aspects of the system please watch our video presentation.

My Health Record privacy fact sheets for consumers

The OAIC has developed fact sheets for individuals about the My Health Record system. Fact sheets 46 and 47 only apply to individuals whose registered Medicare address is in Northern Queensland or the Nepean Blue Mountains areas, while fact sheets 20 and 21 apply to individuals that live in parts of Australia that do not include Northern Queensland and the Nepean Blue Mountains.

Fact sheets 15, 18, 19, 22 and 23 apply to everyone who has a My Health Record or is considering whether to register for one.

OAIC Guidelines

Healthcare Identifiers

More information about Healthcare Identifiers can be found on the Healthcare Identifiers page of this site.

Department of Health

Enquiries: 1800 723 471