Site Changes

On 1 November 2010 the Office of the Privacy Commissioner was integrated into the Office of the Australian Information Commissioner and a new website established at www.oaic.gov.au.

Note 1: Major changes to the Privacy Act 1988 will come into effect in March 2014. Agencies, businesses and not for profits need to start preparing for these changes. For more information go to our privacy law reform page at www.oaic.gov.au
Note 2: From 12 March 2013 content is no longer being added to, or amended, on this site, consequently some information may be out of date. For new privacy content visit the www.oaic.gov.au website.

How should a request for access to medical records be made?

National Privacy Principle 6 (NPP 6) deals with access to medical records held by a private sector organisation ï¿½ see NPP 6. NPP 6 doesn't set out any requirements for the way a request for access should be made.

This means that individuals can exercise their right to see or to copy their medical records simply by asking the organisation holding the records. If the request is a complex one, for example the information comes from a number of different sources, it may be necessary to put the request in writing. An organisation may need to establish the identity of the individual making the request for access.

For more information about accessing medical records, see the Guidelines on Privacy in the Private Health Sector.