Site Changes

On 1 November 2010 the Office of the Privacy Commissioner was integrated into the Office of the Australian Information Commissioner and a new website established at www.oaic.gov.au.

Note 1: Major changes to the Privacy Act 1988 will come into effect in March 2014. Agencies, businesses and not for profits need to start preparing for these changes. For more information go to our privacy law reform page at www.oaic.gov.au
Note 2: From 12 March 2013 content is no longer being added to, or amended, on this site, consequently some information may be out of date. For new privacy content visit the www.oaic.gov.au website.

Can an organisation charge an individual a fee for providing access to the individual`s medical records and how much should that fee be?

Under the new private sector provisions, an organisation can charge for providing access to medical records. The fees which an organisation can charge for providing access must not be excessive and must not apply to the mere lodgement of a request for access. National Privacy Principle (NPP) 6.4 aims to prevent organisations from using excessive charges to discourage individuals from making requests for access to their medical records. See NPP 6.4.

If an organisation incurs substantial costs in meeting a request for access, then the organisation could charge a reasonable fee to meet the administrative costs involved. For example, an organisation could recover some of the costs of photocopying or of the staff time involved. For more information on charging for access to medical records, see Guidelines on Privacy in the Private Health Sector and, on charging for access generally, see Information Sheet 4.