Regulatory Reform Omnibus Act 2025 (73 of 2025)
Schedule 1 Amendments to support a 'tell us once' approach to government service delivery
Part 2 Enhancing use and adoption of healthcare identifiers
Division 4 Health technology providers etc - amendments commencing 1 February 2027
Healthcare Identifiers Act 2010
45 After Division 2 of Part 3
Insert:
Division 2A - Health technology providers
20A Meaning of health technology provider
A health technology provider is a provider of an electronic service (within the meaning of the Online Safety Act 2021) thesole or primary purpose of which is to communicate with any or all of the following about healthcare, or support services, that have been, are being or may be received by a healthcare recipient:
(a) the healthcare recipient;
(b) a healthcare provider;
(c) a health administration entity.
20B Meaning of permitted health technology purpose
The permitted health technology purpose , in relation to a health technology provider and a healthcare recipient, is the purpose of assisting the health technology provider to:
(a) communicate with the healthcare recipient, an identified healthcare provider or a health administration entity about healthcare, or support services, that have been, are being or may be received by the healthcare recipient; or
(b) manage or monitor health information about the healthcare recipient for the purposes of communication that is covered by paragraph (a).
20C Collection, use and disclosure - health technology providers
An entity mentioned in column 1 of an item of the following table, is authorised to take action of the kind described in column 2 of that item with information of the kind described in column 3 of that item in the circumstances described in column 4 of that item.
|
Collection, use and disclosure in relation to health technology providers |
||||
|---|---|---|---|---|
|
Item |
Column 1
Entity |
Column 2
Permitted action |
Column 3
Information |
Column 4
Circumstances |
|
1 |
service operator |
collect from a health technology provider |
healthcare identifier of a healthcare recipient identifying information of a healthcare recipient |
the collection is for the permitted health technology purpose in relation to the health technology provider and the healthcare recipient, and the healthcare recipient has consented to the collection |
|
2 |
service operator |
use disclose to a health technology provider |
healthcare identifier of a healthcare recipient |
the use or disclosure is for the permitted health technology purpose in relation to a health technology provider and the healthcare recipient, and the healthcare recipient has consented to the use or disclosure |
|
3 |
identified healthcare provider health administration entity health technology provider |
collect from: (a) a healthcare recipient; or (b) a responsible person (within the meaning of the Privacy Act 1988) for the healthcare recipient use |
healthcare identifier of the healthcare recipient |
the collection or use is for the permitted health technology purpose in relation to a health technology provider and the healthcare recipient, and the healthcare recipient has consented to the collection or use |
|
4 |
identified healthcare provider health administration entity |
disclose to a health technology provider |
healthcare identifier of a healthcare recipient identifying information of a healthcare recipient |
the disclosure is for the permitted health technology purpose in relation to the health technology provider and the healthcare recipient, and the healthcare recipient has consented to the disclosure |
|
5 |
responsible person (within the meaning of the Privacy Act 1988) for a healthcare recipient |
disclose to: (a) an identified healthcare provider; or (b) a health administration entity; or (c) a health technology provider |
healthcare identifier of the healthcare recipient |
the disclosure is for the permitted health technology purpose in relation to a health technology provider and the healthcare recipient, and the healthcare recipient has consented to the disclosure |
|
6 |
health technology provider |
collect from: (a) the service operator; or (b) a health administration entity; or (c) an identified healthcare provider use |
healthcare identifier of a healthcare recipient identifying information of a healthcare recipient |
the collection or use is for the permitted health technology purpose in relation to the health technology provider and the healthcare recipient, and the healthcare recipient has consented to the collection or use |
|
7 |
health technology provider |
disclose to: (a) a health administration entity; or (b) a healthcare recipient; or (c) an identified healthcare provider; or (d) the service operator; or (e) another entity |
healthcare identifier of the healthcare recipient identifying information of the healthcare recipient |
the disclosure is for the permitted health technology purpose in relation to the health technology provider and the healthcare recipient, and the healthcare recipient has consented to the disclosure |
|
8 |
entity to whom information about a healthcare recipient is disclosed for the permitted health technology purpose in relation to a health technology provider and the healthcare recipient |
collect use disclose |
healthcare identifier of the healthcare recipient identifying information of the healthcare recipient |
the collection, use or disclosure is for the purpose for which the information was disclosed |
20D Regulations relating to health technology providers
(1) The regulations may prescribe rules relating to the collection, use or disclosure of healthcare identifiers or other information by health technology providers.
(2) Without limiting subsection (1), the regulations may prescribe rules relating to the retention or destruction of records.
Copyright notice
© Australian Taxation Office for the Commonwealth of Australia
You are free to copy, adapt, modify, transmit and distribute material on this website as you wish (but not in any way that suggests the ATO or the Commonwealth endorses you or any of your services or products).
