---
title: "Map health-privacy duties under the APPs, state health-records Acts and My Health Records"
url: "https://ailawframework.com/practice/health-and-medical-law/map-health-privacy-duties-across-the-records-systems/australia"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-T1-R8-AU"
practice_area: "Health & Medical Law"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["AU"]
last_reviewed: "2026-09-23"
---

# Map health-privacy duties under the APPs, state health-records Acts and My Health Records

> From the data-flow description, list the APPs, state health-records rules and My Health Records Act duties the lawyer named that apply, with notice and access gaps.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/map-health-privacy-duties-across-the-records-systems/australia  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | From the data-flow description, list the APPs, state health-records rules and My Health Records Act duties the lawyer named that apply, with notice and access gaps. |
| What the lawyer must review | Apply the Privacy Act 1988 to all health service providers and others over $3M turnover Apply the Vic Health Records Act 2001 and NSW HRIP Act 2002 as well Cover APP 1 ADM transparency (2024 Act), which starts 10 December 2026 Match real data flows Check the My Health Records Act 2012 and the Sharing by Default Act 2025 (pathology, imaging) Note the OAIC sweep from January 2026 |
| Written for | Australia |
| Applies to | [Map health-privacy duties across the records systems](https://ailawframework.com/practice/health-and-medical-law/map-health-privacy-duties-across-the-records-systems.md) |

## Checking plan

**Lawyer review required**

The responsible lawyer reviews the work against the instructions, sources and intended use.

- What the AI does: Potential support includes preparing preliminary structure or wording and summarising source material. Confirm the tool’s capability and permitted scope.
- What the lawyer does: Set the scope, verify the evidence, resolve exceptions and approve the final output for its intended use.
- Who reviews: Responsible lawyer with competence in the matter
- Basis: Suggested checking approach based on the task guidance. Complete the assessment for the actual tool, information and jurisdiction.
- Why: The plan reflects the described work and review requirements. Policy colours are not used to determine permission or checking.

## Checks the lawyer makes

1. Confirm that the actual tool, feature and processing terms permit use of this information, including access, retention, training and disclosure conditions.
2. Obtain and inspect the relevant current official register or search result. Confirm identities, interests and the date and scope of the search.
3. Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
4. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
5. Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.

## Notes

- Confirm the required checking with the responsible lawyer before work starts. The checking approach does not establish permission to use AI.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*