The Australian Digital Health Agency has announced that the My Health Record legislative transition period will end on 1 October 2026, requiring healthcare provider organisations to comply with updated requirements under the My Health Records Rules 2026.
Background
The My Health Records Rules 2026 came into effect on 1 April 2026, replacing the My Health Records Rule 2016. Organisations registered for My Health Record prior to 1 April 2026 were provided a 6-month transition period to begin complying with updated requirements under the 2026 Rules.
Preparing for 1 October 2026
To support healthcare provider organisations, the Office of the Australian Information Commissioner (OAIC), in collaboration with the Agency, has developed an updated My Health Record security and access policy template. This template is designed to support healthcare provider organisations to develop new or revise existing security and access policies to ensure they are eligible for, and remain eligible for, registration with the My Health Record System.
Practical Response
Healthcare provider organisations should review their current security and access policies against the requirements of the 2026 Rules and update them if necessary. They should also familiarise themselves with new record-keeping requirements which apply from 1 October 2026. The Agency has developed a fact sheet outlining the key updates organisations should consider when reviewing their existing security and access policies.
Talk to Podium IT
Need a clear next step?
Send a secure enquiry and tell us what you are planning. Please do not include passwords, patient information or other sensitive data.
General information only. It is not legal, privacy or compliance advice; requirements should be assessed for your organisation.