My Health Record
Practice Manager Resources
Register my Healthcare Organisation
Mental Health Resources
Roles and Responsibilities
The Healthcare Identifier (HI) Service and the My Health Record system require people working in Seed Organisations to be assigned to roles, which authorises them to carry out certain actions. The roles recognise the different responsibilities in an organisation from administration through to healthcare provision
Roles and responsibilities
Security Practices and policies checklist
This checklist can be used as a guide to implementing security practices and policies in your healthcare organisation.
It covers the requirements that must be incorporated in a My Health Record system security policy, as outlined in the My Health Records Rule 2016, together with a number of sound privacy and security practices.
Improved data quality and safety
Accurate and up-to-date data is necessary
Data shared by your organisation and data you receive from other healthcare organisations may be relied upon for clinical decision making. Hence, it is important that you design and implement effective arrangements for maintaining quality patient records.
Documents uploaded to the My Health Record system auto-populate with data (e.g. progress notes, clinical synopsis) from the patient’s local medical record, so it is imperative that the data in your clinical information system is of the highest possible quality.
Read more here
Practice Incentive Program
The PIP eHealth Incentive
aims to encourage general practices to keep up to date with the latest developments in digital health and adopt new digital health technology as it becomes available. It aims to help practices improve administration processes and patient care. To be eligible to participate in the Practice Incentive Program, a general practice must be accredited or registered for accreditation, against the RACGP Standards for general practices
Read about the Practice Incentive Program requirements
or for enquiries call the Medicare Phone line: 1800 222 032
The RACGP has developed a number of resources to assist general practice in their use of My Health Record, including the PIP eHealth Incentive policy templates
My Health Record Access
There are two ways through which authorised healthcare providers can access an individual’s record in the My Health Record system
Accessing the My Health Record system through conformant clinical software enables healthcare providers to upload, view and download information from an individual's My Health Record.
The Register of Conformity lists software products and the versions that have been assessed for conformance with national digital health requirements.
conformant clinical software
The National Provider Portal
The National Provider Portal (NPP) is a web based interface through which healthcare providers can access the My Health Record system.
It is a read-only service that is accessible without conformant clinical software
Healthcare providers can now access the NPP using their PRODA (Provider Digital Access) account.
Note that this removes the reliance on the National Authentication Service for Health (NASH) public key infrastructure (PKI) certificates, however, if the healthcare provider has a NASH PKI Certificate for Individuals, they can still continue to use this to access the NPP until the certificate expires.
How to access the My health record using the provider portal Provider Portal
The My Health Record Provider Portal allows you to search on and view individual digital health records through your web browser. To access the Provider Portal you must first register
and obtain the appropriate credentials.
If you are an existing user of the My Health Record system you can login to the Provider Portal here
Provider Digital Access (PRODA) is an online authentication system used to securely access government online services. Using a two-step verification process, you only need a username and password to access multiple online services. Your PRODA account doesn’t expire and can be used to access multiple services from any location. If you change your employment you keep the same PRODA account as it belongs to you as an individual for life. You will need to link your PRODA account to your new place of employment.
National Authentication Service for Health (NASH) organisation Public Key Infrastructure (PKI) certificate
A NASH certificate is required by organisations that wish to interact with the My Health Record system using conformant software. An authorised officer of a registered healthcare provider organisation that requires a NASH certificate can request and download one through HPOS, accessible via PRODA. The certificate will be available for download for a period of 30 days from when it is issued.
Request a new NASH PKI Certificate
- An officer authorised to request a NASH certificate is the registered organisation's OMO.
Note: The Responsible Officer (RO) for an organisation also has OMO permissions.
NASH PKI Certificates expire every two years. Follow these steps to request a new NASH in PRODA. This needs to be completed by the OMO or RO. Please refer to the information above.
Register for PRODA, link identifiers and request a NASH PKI Certificate
Pathology & Diagnostic Imaging reports being shared with the My Health Record
You, your patient, and any other healthcare professionals involved in their care will be able to access these pathology & Diagnostic Imaging reports via the My Health Record, wherever and whenever they are needed.
To enable the uploading of SNP pathology results to the My Health Record system, practices must request this by contacting the SNP Medical Liaison Manager on:
T: 1300 767 284
Find out which pathology and diagnostic imaging services currently use My Health Record.
Gold Coast Health are one of the providers now uploading diagnostic imaging and pathology results to the My Health Record.
In a medical emergency, healthcare providers connected to the My Health Record system can see your health information such as allergies, medicines and immunisations. This helps them to provide you with the best possible treatment and care.
The fact sheet
can be found here.
My Health Record Fact Sheets
Young Australians aged 14-17 years
- From the age of 14, young Australians can choose to take control of their own record and decide who sees their information. They can also include the name of their parent or carer as a nominated representative, if they would still like them to see some or all of their record. Refer to frequently asked questions
Health Provider Portal (HPP) – The Viewer
GPs will need to register for the HPP to gain read-only online access to their patients’ Queensland Health (QH) records.
By registering for the HPP, you will be able to view a wide range of patient hospital information in one place. It’s convenient, secure and accessible at any time.
Prior to registering you, or your practice manager, will need to ensure that details of your Medicare Provider Number and Healthcare Provider Identifier – Individual (HPI-I) are up-to-date and registered with QH’s Secure Transfer Service (STS). This allows QH to communicate with you electronically.
For registration details and terms and conditions please access the HPP on the QLD Health website here
HPP Training and Support Resources / Factsheets and How to Videos are available here
Once you are registered you will be able to Login to the HPP
Many Queensland GPs have now registered for access to the HPP. Please remember to logout when it is not in use. Technical assistance is available, if required, by calling 1300 478 439.
Helpful Links for Health Care providers
The Australian Digital Health Agency has released a number of educational webinars.
Webinar: My Health Record - a tool to support clinicians coordinating care for those with mental health conditions
1.00pm - 2.00pm (AEST)
Tuesday, 8 October 2019
In acknowledgement of World Mental Health Day this webinar will focus on using key elements of My Health Record to improve continuity of care for those accessing mental health services. There will be an opportunity for Q&A during this session.
Register now: https://login.redbackconferencing.com.au/landers/page/7b098b
Webinar: Leveraging My Health Record to improve practice workflow - a session for practice managers
1.00pm - 2.00pm (AEST)
Tuesday, 9 October 2019
This webinar is intended for practice managers and will provide an overview of the My Health Record system, highlighting the benefits for the practice, the providers and the patient. Content will cover strategies on how to embed My Health Record to improve practice workflow and increase efficiencies. There will be an opportunity for Q&A during this session.
Register now: https://login.redbackconferencing.com.au/landers/page/5cc5ef
Webinar: My Health Record for Specialist practices - adding value to clinical care
1.00pm - 2.00pm (AEST)
Tuesday, 22 October 2019
This webinar will provide specialist practices with an insight into the My Health Record system and the key clinical information that can be accessed through it. The webinar will include a case study and specific examples of when My Health Record may add value to clinical practice. There will be an opportunity for Q&A during this session.
Register now: https://login.redbackconferencing.com.au/landers/page/34e1ae
Webinar: My Health Record Clinical Documents Explained
Webinar: My Health Record Emergency Access of Information - Healthcare Providers
A 'What you need to know about connecting your practice to My Health Record' webinar was held on Wednesday 6 February 2019.
This webinar provided an overview to Healthcare providers about emergency access of information within the My Health Record. For your reference:
Webinar: Connecting your practice to My Health Record - 6 February 2019
On demand Training
As a healthcare provider, you can now simulate digital health functionality through software simulations at a time that suits you.
Please note that the training environment is not intended to provide detailed training for trainers on how to use the clinical software supported. Instead it provides a tool for trainers to demonstrate how the specific digital health functions work. It is recommended that you are familiar with your selected clinical software prior to running a training session.
The environment currently supports the following software products:
The Training Environment
- Best Practice
- Medical Director
- Fred Dispense (Pharmacy)
Allied Health Professionals
Information for allied Health Professionals looking to register for My Health Record Allied Health
Pharmaceutical Society of Australia digital health report July 2019: Connecting the dots: Digitally empowered pharmacists
Information for Community Pharmacy – My Health Record Pharmacists
Information for specialists looking to register for My Health Record - Specialists
Information for Aged Care facilities looking to register for My Health Record – Aged Care
On 26 November 2018, the Australian Parliament passed legislation to strengthen privacy protections in My Health Records Act 2012 without debate or division.
The new legislation means that you can opt in or opt out of My Health Record at any time in your life. Records will be created for every Australian who wants one after 31 January 2019. After then, you can delete your record permanently at any time.
Briefly, the changes will:
- Allow Australians to permanently delete their records, and any backups, at any time.
- Explicitly prohibit access to My Health Records by insurers and employers.
- Provide greater privacy for teenagers 14 years and over.
- Strengthen existing protections for people at risk of family and domestic violence.
- Clarify that only the Agency, the Department of Health and the Chief Executive of Medicare (and no other government agency) can access the My Health Record system.
- Explicitly require law enforcement and other agencies to produce a court order to access information in My Health Records.
- Make clear that the system cannot be privatised or used for commercial purposes.
This is backed up by harsher penalties and fines for inappropriate or unauthorised use of My Health Records. A summary of the changes is available here
GCPHN commitment to you
We take privacy and security extremely seriously. How we store, share, secure and dispose of your data can be viewed here.
Protecting sensitive healthcare and corporate information is essential in the provision of healthcare services. One way to mitigate the risk of information being accessed is to use the latest versions for systems and software applications on all devices, including digital medical equipment.
Digital health information and security guidelines:
Does the practice have a My Health Record breach notification process?
A breach may be unauthorised access, disclosure of information or any circumstance where the systems integrity may be comprised. Data breach notification - steps to follow