Document ID: chunk:federal_register_of_legislation:F2016C00607:schedule:1:p6
Version: federal_register_of_legislation:F2016C00607
Segment Type: schedule
Provision Reference: sch 1 (pt 6/32)
Character Range: 21601–24697

has been restricted using the access controls in paragraph 1(c) exist solely by viewing the healthcare recipient's My Health Record unless:
                     (A)                  the organisation has been given a document code in accordance with paragraph (2)(a)(i);
                     (B)                  the healthcare recipient has set access controls in accordance with paragraph (2)(a)(ii) permitting the organisation to access the relevant record; or
                     (C)                  the organisation uploaded the relevant record to the My Health Record system; and
           (c)                    all records uploaded to the healthcare recipient's My Health Record are, as a default, uploaded without a document code applied to the record.  Where a registered healthcare provider organisation is on the access list for a healthcare recipient's My Health Record, the System Operator must ensure that a registered healthcare recipient is able to choose whether a record uploaded by that healthcare provider organisation is uploaded with or without a document code applied to the record.
           Note 1: The extent of access by registered healthcare provider organisations under paragraph (1)(a) depends on how access flags have been assigned within the healthcare provider organisation's network ― see rules 9 and 10.  Once a record code has been given to a registered healthcare provider organisation, the healthcare recipient will not subsequently need to give their record code to the same organisation provided that the organisation remains on the access list for the healthcare recipient's My Health Record.  Where a registered healthcare provider organisation is given a healthcare recipient's record code, and is added to the access list for the healthcare recipient's My Health Record, the other healthcare provider organisations (if any) on the access list for the healthcare recipient's My Health Record are unaffected.
            Note 2: The access control specified in paragraph (1)(b) will not prevent a registered healthcare provider organisation determining if a healthcare recipient has a My Health Record if the organisation carries out a manual search of the My Health Record system.  However, it will prevent the organisation's clinical information system from automatically checking and displaying whether a healthcare recipient has a My Health Record.
           Note 3: If a healthcare recipient has set up a record code, that code will prevent a registered healthcare provider organisation, which is not on the access list for the healthcare recipient's My Health Record, accessing the healthcare recipient's My Health Record unless the healthcare recipient, or the System Operator at the healthcare recipient's request, gives the organisation the record code.  Record codes and document codes will not prevent access to a My Health Record or a record in a My Health Record where access is permitted in the case of a serious threat under section 64 of the Act.
           Note 4: While records uploaded to a healthcare recipient's My Health Record