Document ID: chunk:federal_register_of_legislation:C2024C00693:section:25e
Version: federal_register_of_legislation:C2024C00693
Segment Type: section
Provision Reference: s 25E
Character Range: 81246–83301

25E  Obligation to keep information accurate, up‑to‑date and complete
 (1) If a healthcare provider organisation becomes aware that information held by the service operator in relation to the organisation is not accurate, up‑to‑date and complete, the organisation must:
 (a) give the service operator, in writing, accurate, up‑to‑date and complete information; and
 (b) do so within 20 business days after the organisation becomes aware that the information held by the service operator is not accurate, up‑to‑date and complete.
 (2) Subsection (1) does not apply if:
 (a) the information that is no longer accurate, up‑to‑date and complete is personal information that the service operator was only able to lawfully obtain with the consent of the person to whom the information relates; and
 (b) instead of giving accurate, up‑to‑date and complete personal information within the period specified in that subsection, the healthcare provider organisation notifies the service operator within that period, in the manner and form approved by the service operator, that the person to whom the information relates has withdrawn consent for the information to be given to the service operator.
 (3) Subsection (1) does not apply if:
 (a) the healthcare provider organisation, or an individual healthcare provider who is linked to the healthcare provider organisation, is required by an Australian law, or by a lawful requirement of the national registration authority, to give the national registration authority the accurate, up‑to‑date and complete information; and
 (b) the healthcare provider organisation, or the individual healthcare provider, complies with the requirement.
 (4) A person is liable to a civil penalty if:
 (a) the person fails to give the service operator information in the circumstances mentioned in subsection (1); and
 (b) the person knows or is reckless as to those circumstances.
Civil penalty: 100 penalty units.

Division 4—Unauthorised use and disclosure of healthcare identifiers and other information obtained under this Act