Document ID: chunk:federal_register_of_legislation:F2016C00607:schedule:1:p20
Version: federal_register_of_legislation:F2016C00607
Segment Type: schedule
Provision Reference: sch 1 (pt 20/32)
Character Range: 63261–66698

must have at least one, but no more than three, contracted service provider officers at all times.
     (3)     A contracted service provider must ensure that its contracted service provider officer appointed under subrule (1) carries out the duties prescribed under subrule (4).
     (4)     A person is the contracted service provider officer for a contracted service provider if the duties of the person include the following:
           (a)                    receiving communications from the System Operator about the operation of the My Health Record system;
           (b)                    acting as a liaison between the System Operator and the contracted service provider; and
           (c)                    maintaining the System Operator's records about the professional and business details of the contracted service provider officer and the contracted service provider.

37.                  Access to the My Health Record System
     (1)     A contracted service provider must only use or access the My Health Record system to the extent they have been instructed to do so by a linked registered healthcare provider organisation.
     (2)     Each time a contracted service provider accesses the My Health Record system, or collects, uses or discloses a record from or to the My Health Record system, the contracted service provider must give the System Operator the healthcare identifier of the linked registered healthcare provider organisation which instructed the contracted service provider to access the My Health Record system or to collect, use or disclose the record.

38.                  Requirement to notify the System Operator of certain things
     (1)     This rule applies if a contracted service provider:
           (a)                    becomes aware, or suspects, that:
                (i)                     the contracted service provider has given the System Operator, or uploaded to the My Health Record system, inaccurate provenance information;
                (ii)                   there is a non-clinical, My Health Record system-related error in a record that has been accessed via, or downloaded from, the My Health Record system;
                (iii)                 under rule 34(3), a registered healthcare provider organisation for which the contracted service provider provides services is no longer linked to the contracted service provider;
           (b)                    undergoes a material change;
           (c)                    has appointed, or cancelled the appointment of, a contracted service provider officer under rule 36; or
           (d)                    changes, or becomes aware of a change in, the professional or business details of its currently appointed contracted service provider officer.
     (2)     A contracted service provider must:
(a)                    give the System Operator, in writing, details of the event or circumstances; and
(b)                    do so within two business days of become aware or suspecting the event or circumstance.

39.                  Requirement to maintain interoperability
     A contracted service provider must maintain interoperability with the My Health Record system in accordance with the System Operator's interoperability requirements.

40.                  Requirement to provide assistance
     (1)     At the System Operator's request, a contracted service provider must promptly provide all