Skip to main content
Image coming soon

Australia My Health Records Act 2012 Evidence & Implementation Kit

$249.00
Adding to cart… The item has been added
Australia My Health Records Act 2012 · Evidence & Implementation Kit
Participate in the My Health Record system compliantly, without decoding the Act and Rule yourself.
Every My Health Records obligation handed to you as an adopt-ready control, from the mandatory security and access policy and authorised use to the consumer controls and the specific data breach scheme, with the evidence a regulator examines.
Participation-ready in a weekend, not a quarter.

Here is the honest situation. Healthcare provider organisations that connect to the My Health Record system carry real legal obligations under the My Health Records Act: a mandatory written security and access policy, use of the record only for authorised healthcare purposes, respect for the consumer's access controls and a ban on using the information for insurance or employment, a specific data breach notification scheme to both the System Operator and the OAIC, and correct use of healthcare identifiers. Penalties are civil and criminal. Building all of that and evidencing it is weeks of work, and a missing security policy or a mishandled breach is exactly where participants fall short.

This Kit removes the guesswork. It is every My Health Records obligation written as an adopt-ready control you personalize in a weekend, with the evidence a regulator examines.

What you get, the moment you buy

30
Obligations as adopt-ready controls. Every My Health Records obligation, from registration and the mandatory security and access policy through authorised use, the consumer controls and the breach scheme, written so you personalize and apply it.
30
Evidence-they-examine checklists. For each control, exactly what a regulator examines, plus where participants fall short, so you close the gap first.
1
My Health Records Control Matrix, pre-built. Every obligation in a working spreadsheet, ready to record status and evidence location across the organisation.
1
Gap & Readiness Assessment. Score each obligation and the workbook returns your readiness as a single percentage, and exactly what to fix next.

Grounded in the Australia My Health Records Act 2012 and its Rule, with the mandatory security and access policy, authorised use, the consumer controls and the specific data breach notification scheme called out. Editable Word and Excel files.

The security and access policy is mandatory, and specific
The Act requires a written security and access policy covering authentication, access, training, physical and technical security, mobile devices and breach management. This is not optional, and it is exactly what a regulator asks to see. This Kit builds that policy area by area, so the mandatory document is complete and evidenced.

What one control looks like

This is the mandatory written security and access policy, the document every participant must hold. All 30 are built to this depth.

MHR-6 Maintain a written security and access policy SECURITY POLICY
Put this control in place

[Registered Entity] must establish, maintain, communicate, and enforce a written security and access policy governing its use of the My Health Record system, review it regularly and after material change, and ensure it addresses each area required by the Rule so that the policy remains current, approved, and accessible to all authorised users.

Compliance note.

Absence of a current written policy is a direct breach of participation requirements.

Evidence a regulator examines
  • Approved and version controlled security and access policy
  • Policy review schedule and last review approval record
  • Staff acknowledgement register for the policy
  • Distribution and intranet publication evidence
Common finding they raise: No written policy exists, or it is outdated and never reviewed after changes.

Why this is not another template pack

  • The evidence is the point. An obligation you cannot evidence is a breach of the Act. This tells you what a regulator examines and where participants fall short, for every obligation.
  • The security policy and breach scheme built in. The mandatory security and access policy and the My Health Record specific data breach scheme, notifying both the System Operator and the OAIC, are written into the controls.
  • Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
  • It compounds. The Act works alongside the Privacy Act and the Healthcare Identifiers scheme, so this feeds your wider health-information compliance.

Who buys this

Healthcare provider organisations and the service providers connecting to the My Health Record system, and the privacy, security and clinical governance leads who own it. Whether it is first participation or a compliance review, you save weeks and walk in with the policy, controls and evidence ready.

By the end of the weekend you will have
✓  An adopt-ready control for all 30 obligations
✓  A completed My Health Records control matrix
✓  The evidence a regulator examines
✓  Your mandatory security and access policy in place
✓  A readiness percentage and a fix list
✓  The common shortfalls closed

Common questions

Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.

Is this legal advice? No. It is an implementation toolkit grounded in the Act and Rule. For a specific matter consult counsel; this gets your policy, controls and records in order fast.

Does it cover the security and access policy? Yes. Each mandatory policy area, authentication, access, training, physical and technical security, mobile devices and breach management, is built as a control.

Does it cover the data breach scheme? Yes. The My Health Record specific scheme, notifying the System Operator and the OAIC, is its own control group, distinct from the general breach scheme.

What if it is not for me? A 30-day money-back guarantee.

Do not connect to My Health Record without the mandatory security policy.
Every My Health Records obligation is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and be participation-ready this weekend.

Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com

!