Site Changes

On 1 November 2010 the Office of the Privacy Commissioner was integrated into the Office of the Australian Information Commissioner and a new website established at www.oaic.gov.au.

Note 1: Major changes to the Privacy Act 1988 will come into effect in March 2014. Agencies, businesses and not for profits need to start preparing for these changes. For more information go to our privacy law reform page at www.oaic.gov.au
Note 2: From 12 March 2013 content is no longer being added to, or amended, on this site, consequently some information may be out of date. For new privacy content visit the www.oaic.gov.au website.

What can my healthcare identifier be used and disclosed for?

Healthcare providers can only use and disclose healthcare identifiers for communicating and managing health information as part of the:

provision of healthcare to an individual
management, funding, monitoring or evaluation of healthcare
provision of medical indemnity cover for a healthcare provider
conducting research approved by a Human Research Ethics Committee
to lessen or prevent a serious threat to an individual’s life health or safety or to public health or safety.

Healthcare providers may also use or disclose an IHI as required or authorised by law. For example, a provider may be legally compelled to disclose an individual’s IHI if issued a subpoena by a court for the provision of information. A provider may also disclose an IHI in order to report unlawful activity, such as a suspected case of child abuse.