Map health-privacy duties under the APPs, state health-records Acts and My Health…

Key facts

Human involvement
YellowClose supervision
How AI is used
From the data-flow description, list the APPs, state health-records rules and My Health Records Act duties the lawyer named that apply, with notice and access gaps.
What the lawyer must review
  • Apply the Privacy Act 1988 to all health service providers and others over $3M turnover
  • Apply the Vic Health Records Act 2001 and NSW HRIP Act 2002 as well
  • Cover APP 1 ADM transparency (2024 Act), which starts 10 December 2026
  • Match real data flows
  • Check the My Health Records Act 2012 and the Sharing by Default Act 2025 (pathology, imaging)
  • Note the OAIC sweep from January 2026
Written for / version
Australia versionAU

Rules that apply

The document starts from the task name. Change it if this piece of work is different.

Who does what

Who does what
RoleWhat they do
AssistanceConsider narrowly defined preparation support after confirming the tool’s capability and permitted scope.
LawyerSet the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output.

Checklist

  1. Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
  2. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
  3. Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.

Related tools

Related jurisdictions