My Health Record Security and Access Policy Please note that the following is intended as a guide only and should be tailored to meet the needs of your organisation. We do not recommend implementing this policy without first considering whether it meets your needs. This sample policy was initially developed by Inner East Melbourne Medicare Local. PURPOSE To provide guidance for staff and contractors about access to, and use of, the My Health Record system. To provide guidance in the use of information technology in [name of organisation] as it relates to the My Health Record system. To outline the roles and responsibilities of the Responsible Officer and the Organisation Maintenance Officer in relation to the My Health Record system. SCOPE OF POLICY This policy applies to all staff (including its employees and any healthcare provider to whom [name of organisation] supplies services under contract) with access to the My Health Record system. RELATED This policy is to be read in conjunction with the following documents: DEFINITIONS Access flag means an information technology mechanism made available by the System Operator to define access to a consumer’s digital health record. HI Service is the Identifiers Service’, a national system for uniquely ‘Healthcare identifying healthcare providers and individuals, which makes sure the right health information is associated with the right individual. Information Commissioner is the Office of the Australian Information Commissioner (OAIC). Network means a network of healthcare provider organisations created and managed in accordance with subsections 9A (3) to (6) of the Healthcare Identifiers Act 2010. Network organisation is a healthcare provider organisation which is part of a Network and is subordinate to a Seed Organisation; it can be used to represent different departments, sections or divisions within an organisation or can be separate legal entities from the Seed Organisation.
My Health Record Security and Access Policy Please note that the following is intended as a guide only and should be tailored to meet the needs of your organisation. We do not recommend implementing this policy without first considering whether it meets your needs. This sample policy was initially developed by Inner East Melbourne Medicare Local. PURPOSE To provide guidance for staff and contractors about access to, and use of, the My Health Record system. To provide guidance in the use of information technology in [name of organisation] as it relates to the My Health Record system. To outline the roles and responsibilities of the Responsible Officer and the Organisation Maintenance Officer in relation to the My Health Record system. SCOPE OF POLICY This policy applies to all staff (including its employees and any healthcare provider to whom [name of organisation] supplies services under contract) with access to the My Health Record system. RELATED This policy is to be read in conjunction with the following documents: DEFINITIONS Access flag means an information technology mechanism made available by the System Operator to define access to a consumer’s digital health record. HI Service is the ‘Healthcare Identifiers Service’, a national system for uniquely identifying healthcare providers and individuals, which makes sure the right health information is associated with the right individual. Information Commissioner is the Office of the Australian Information Commissioner (OAIC). Network means a network of healthcare provider organisations created and managed in accordance with subsections 9A (3) to (6) of the Healthcare Identifiers Act 2010. Network organisation is a healthcare provider organisation which is part of a Network and is subordinate to a Seed Organisation; it can be used to represent different departments, sections or divisions within an organisation or can be separate legal entities from the Seed Organisation.