Document ID: chunk:federal_register_of_legislation:F2024N00985:clause:1_26
Version: federal_register_of_legislation:F2024N00985
Segment Type: clause
Provision Reference: sch 1 cl 26
Character Range: 59453–60382

26  Cloud Storage of Client Records
     1.    Providers that intend to start using cloud storage services or change their cloud storage provider, must request and obtain approval from the program before storing client records on a new service.
     2.    A request for approval under subsection (1) must be emailed to hearing@health.gov.au.
     3.    Providers must not use unsecured cloud services (including Google Drive, Google Docs and Dropbox)
     4.    Any agreement with a cloud storage service provider must ensure that client records will be:
             1.    hosted on a server located in Australia; and
             2.    will not be disclosed outside Australia; and
             3.     encrypted to at least the equivalent of either
         (i) Unofficial with a Dissemination Limiting Marker of Sensitive: Personal; or
         (ii) Official with an Access Information Management Marker of Personal-Privacy.