The My Health Record Security and Access Policy Directive has been published by NSW Health.
Highlights include the following:
Staff wanting to access their own My Health Record should do so through the MyGov portal and not through the HealtheNet Clinical Portal. NSW Health does not need to show a patient the contents of their My Health Record component in the HealtheNet Clinical Portal as the patient can view the information themselves online. Patients should be directed to view their My Health Record through the online consumer portal, or to contact the My Health Record System Operator on: 1800 723 471.
Section 64 of the My Health Records Act 2012 allows a healthcare provider to override advanced access controls where they believe access to the information is necessary to lessen or prevent a serious threat to an individual's life, health or safety and it isunreasonable or impracticable to obtain the patient's consent (for example, if the patient is unconscious); or to lessen /prevent a serious threat to public health or public safety. Staff who use Emergency Access must be able to justify the circumstances during any audit by the System Operator and all access will be documented in the patient’s My Health Record.