2010-2011

 

The Parliament of the

Commonwealth of Australia

 

HOUSE OF REPRESENTATIVES

 

 

 

 

Presented and read a first time

 

 

 

 

 

 

 

 

 

Personally Controlled Electronic Health Records Bill 2011

 

No.      , 2011

 

(Health and Ageing)

 

 

 

A Bill for an Act to provide for a system of access to electronic health records, and for related purposes

   

   

   

Contents

Part 1—Preliminary                                                                                                              1

1............ Short title............................................................................................. 1

2............ Commencement................................................................................... 2

3............ Object of Act....................................................................................... 2

4............ Simplified outline of Act..................................................................... 3

5............ Definitions.......................................................................................... 4

6............ Definition of authorised representative of a consumer..................... 13

7............ Definition of nominated representative of a consumer..................... 15

8............ Things done etc. under provisions of other Acts............................... 16

9............ Definition of identifying information ................................................. 16

10.......... Definition of shared health summary ............................................... 18

11.......... Act to bind the Crown....................................................................... 18

12.......... Concurrent operation of State laws................................................... 18

13.......... External Territories............................................................................ 18

Part 2—The System Operator, advisory bodies and other matters       19

Division 1—System Operator                                                                                 19

14.......... Identity of the System Operator........................................................ 19

15.......... Functions of the System Operator..................................................... 19

16.......... System Operator to have regard to advisory bodies’ advice etc........ 21

17.......... Retention of records uploaded to National Repositories Service....... 21

Division 2—Jurisdictional advisory committee                                            22

18.......... Establishment, functions and status of the jurisdictional advisory committee           22

19.......... Membership of the jurisdictional advisory committee....................... 22

20.......... Termination of appointment of members of the jurisdictional advisory committee   23

21.......... Substitute members of the jurisdictional advisory committee............ 23

22.......... Application of the Remuneration Tribunal Act.................................. 23

23.......... Regulations may provide for matters relating to committee............... 23

Division 3—Independent advisory council                                                       25

Subdivision A—Establishment, functions and status                                        25

24.......... Establishment and functions of the independent advisory council..... 25

25.......... Independent advisory committee has privileges and immunities of the Crown         25

Subdivision B—Membership                                                                                  25

26.......... Membership of the independent advisory council............................. 25

27.......... Appointment of members.................................................................. 25

28.......... Acting appointments......................................................................... 26

Subdivision C—Members’ terms and conditions                                              27

29.......... Remuneration.................................................................................... 27

30.......... Leave................................................................................................. 28

31.......... Disclosure of interests to the Minister............................................... 29

32.......... Disclosure of interests to the independent advisory council.............. 29

33.......... Resignation....................................................................................... 29

34.......... Termination of appointment.............................................................. 30

35.......... Other terms and conditions............................................................... 30

Subdivision D—Procedures of the independent advisory council                31

36.......... Who presides at meetings.................................................................. 31

37.......... Regulations may provide for other procedural matters...................... 31

Division 4—Functions of Chief Executive Medicare                                  32

38.......... Registered repository operator.......................................................... 32

Part 3—Registration                                                                                                            33

Division 1—Registering consumers                                                                     33

39.......... Consumers may apply for registration.............................................. 33

40.......... When a consumer is eligible for registration..................................... 33

41.......... Registration of a consumer by the System Operator......................... 33

Division 2—Registering healthcare provider organisations                  35

42.......... Healthcare provider organisation may apply for registration............. 35

43.......... When a healthcare provider organisation is eligible for registration.. 35

44.......... Registration of a healthcare provider organisation............................. 35

45.......... Condition of registration—uploading of records, etc........................ 36

46.......... Condition of registration—non-discrimination in providing healthcare to a consumer who does not have a PCEHR etc........................................................................................................... 37

Division 3—Registering repository operators, portal operators and contracted service providers      38

47.......... Persons may apply for registration as a repository operator, a portal operator or a contracted service provider       38

48.......... When a person is eligible for registration as a repository operator, a portal operator or a contracted service provider.......................................................................................................... 38

49.......... Registration of a repository operator, a portal operator or a contracted service provider          39

50.......... Condition about provision of information to System Operator......... 39

Division 4—Cancellation, suspension and variation of registration 40

51.......... Cancellation or suspension of registration......................................... 40

52.......... Variation of registration.................................................................... 41

53.......... Notice of cancellation, suspension or variation of registration etc..... 42

54.......... Effect of suspension.......................................................................... 43

55.......... PCEHR Rules may specify requirements after registration is cancelled or suspended             43

Division 5—The Register                                                                                           45

56.......... The Register...................................................................................... 45

57.......... Entries to be made in Register........................................................... 45

Division 6—Information use and disclosure for identity verification 46

58.......... Identifying information may be used and disclosed.......................... 46

Part 4—Collection, use and disclosure of health information included in a registered consumer’s PCEHR                                                                                                                                       48

Division 1—Unauthorised collection, use and disclosure of health information included in a consumer’s PCEHR                                                                                                     48

59.......... Unauthorised collection, use and disclosure of health information included in a consumer’s PCEHR     48

60.......... Secondary disclosure........................................................................ 48

Division 2—Authorised collection, use and disclosure                               50

Subdivision A—Collection, use and disclosure in accordance with access controls       50

61.......... Collection, use and disclosure for providing healthcare.................... 50

62.......... Collection, use and disclosure to nominated representative............... 50

Subdivision B—Collection, use and disclosure other than in accordance with access controls   51

63.......... Collection, use and disclosure for management of PCEHR system.. 51

64.......... Collection, use and disclosure in the case of a serious threat............. 51

65.......... Collection, use and disclosure authorised by law.............................. 52

66.......... Collection, use and disclosure with consumer’s consent................... 52

67.......... Collection, use and disclosure by a consumer................................... 52

68.......... Collection, use and disclosure for indemnity cover........................... 52

69.......... Disclosure to courts and tribunals..................................................... 53

70.......... Disclosure for law enforcement purposes, etc................................... 54

Division 3—Prohibitions and authorisations limited to PCEHR system                55

71.......... Prohibitions and authorisation limited to health information collected by using the PCEHR system        55

Division 4—Interaction with the Privacy Act 1988                                    57

72.......... Interaction with the Privacy Act 1988 ................................................ 57

73.......... Contravention of this Act is an interference with privacy.................. 57

Part 5—Other civil penalty provisions                                                                     58

74.......... Registered healthcare provider organisations must ensure certain information is given to System Operator            58

75.......... Certain participants in the PCEHR system must notify data breaches etc.                58

76.......... Requirement to notify if cease to be eligible to be registered............. 60

77.......... Requirement not to hold or take records outside Australia................ 60

78.......... Participant in the PCEHR system must not contravene PCEHR Rules 61

Part 6—Civil penalty supporting provisions                                                        62

Division 1—Civil penalty orders                                                                           62

79.......... Civil penalty orders........................................................................... 62

80.......... Civil enforcement of penalty............................................................. 63

81.......... Conduct contravening more than one civil penalty provision............ 63

82.......... Multiple contraventions..................................................................... 63

83.......... Proceedings may be heard together................................................... 64

84.......... Civil evidence and procedure rules for civil penalty orders............... 64

85.......... Contravening a civil penalty provision is not an offence................... 64

Division 2—Relationship to other proceedings                                              65

86.......... Civil proceedings after criminal proceedings..................................... 65

87.......... Criminal proceedings during civil proceedings................................. 65

88.......... Criminal proceedings after civil proceedings..................................... 65

89.......... Evidence given in civil proceedings not admissible in criminal proceedings            65

Division 3—Other matters                                                                                       67

90.......... Ancillary contravention of civil penalty provisions........................... 67

91.......... Mistake of fact.................................................................................. 67

92.......... State of mind..................................................................................... 68

93.......... Civil penalty provisions contravened by employees, agents or officers 68

Part 7—Voluntary enforceable undertakings and injunctions                 69

94.......... Acceptance of undertakings.............................................................. 69

95.......... Enforcement of undertakings............................................................ 69

96.......... Injunctions........................................................................................ 70

Part 8—Other matters                                                                                                        73

Division 1—Review of decisions                                                                            73

97.......... Review of decisions.......................................................................... 73

Division 2—Delegations                                                                                             75

98.......... Delegations by the System Operator................................................. 75

Division 3—Authorisations of entities also cover employees                 76

99.......... Authorisations extend to employees etc............................................ 76

Division 4—Treatment of certain entities                                                        77

100........ Treatment of partnerships.................................................................. 77

101........ Treatment of unincorporated associations......................................... 77

102........ Treatment of trusts with multiple trustees.......................................... 77

103........ Exception in certain circumstances.................................................... 78

104........ Division does not apply to Division 3 of Part 3................................ 78

Division 5—Alternative constitutional bases                                                  79

105........ Alternative constitutional bases......................................................... 79

Division 6—Annual reports and review of Act                                              82

106........ Annual reports by Information Commissioner.................................. 82

107........ Annual reports by System Operator.................................................. 82

108........ Review of operation of Act............................................................... 83

Division 7—PCEHR Rules, regulations and other instruments           85

109........ Minister may make PCEHR Rules.................................................... 85

110........ Minister may determine a law of a State or Territory to be a designated privacy law               87

111........ Guidelines relating to the Information Commissioner’s enforcement powers etc.    87

112........ Regulations....................................................................................... 87

 

A Bill for an Act to provide for a system of access to electronic health records, and for related purposes

The Parliament of Australia enacts: