My Health Record security and access policy template and e-learning module

The Office of the Australian Information Commissioner (OAIC), in collaboration with the Australian Digital Health Agency (ADHA), has developed a security and access policy template to help healthcare providers comply with their obligations under Rule 42 of the My Health Records Rule 2016.

Rule 42 requires healthcare provider organisations to establish, communicate and enforce a written security and access policy to register, and remain registered, with the My Health Record system.

The ADHA has developed an e-learning module to accompany the template that helps healthcare providers use it correctly. It outlines practical steps to follow when drafting a security and access policy for your organisation.

You can find the policy template on the OAIC website and access the e-learning module via the ADHA’s training website.