This is how your data in the My Health Record will be used

Secondary use of My Health Record

On Friday the Federal Government quietly released its long-awaited framework for secondary use of information contained within the My Health Record. It will generate discussion as it is controversial.

The release of the framework to guide the secondary use of My Health Record (MyHR) system data comes just months before the participation rules for the Australian national health record change from opt-in to opt-out.

Consent for secondary use is implied if consumers don’t opt out of the MyHR. In other words, people need to take action if they don’t want their health data to be used for purposes other than direct clinical care.

To stop information flowing to third parties, consumers will have to press the ‘withdraw participation button’.

Another hot topic is the use of the data by commercial organisations which, interestingly, is permitted under the framework, provided it is ‘in the public interest’.

And, as expected, one of the main purposes of secondary use is the monitoring of outcomes of care. It remains to be seen what this will mean for the interaction and relationship between consumers and health providers.

The release of data is expected to commence from 2020.

Commercial use

The Australian Institute of Health and Welfare (AIHW) will act as the data custodian.

A ‘My Health Record secondary use of data governance board’ will assess applications for access to MyHR data ‘based on the use of data, not the user’.

Any Australian-based entity, except insurance companies, can apply to get access to the data. The board will take a ‘case and precedent’ approach to determining what uses will be permitted and not permitted for secondary use.

Although information in the MyHR cannot be used for commercial purposes, such as direct marketing to consumers, data may be released to commercial organisations if they can demonstrate that the use is consistent with ‘research and public health purposes’ and is likely to be ‘in the public interest’.

I suspect that this backdoor will be in high demand by third parties such as the pharmaceutical industry.

The board can permit the linkage of myHR data with other data sources once the applicant’s use is assessed to be of public benefit. In an example provided in the framework, researchers link MyHR information to a database of clinical trial participants to investigate hospitalisations, morbidity and mortality.

Data may also be linked to other datasets such as hospitals, MBS, PBS and registry data.


The framework gives examples of the use of health data for secondary purposes, including:

  • Evaluation of health interventions and health programs (e.g. determine if an intervention or service is generating outcomes/benefits consistent with funding approvals)
  • Examining practice variations for the purposes of quality improvement or adherence to best-practice guidelines at a health service level
  • Construction of clinical registries (e.g. create or supplement data in clinical registries to evaluate the effectiveness of interventions)
  • Improvement of existing health services and development of new services
  • Enhancing post-market surveillance insights for new products
  • Improvements to patient pathways research
  • Increased visibility and insights into population health matters
  • Development of government health policy
  • Develop/enable technology innovations
  • Preparation of publications
  • Recruitment to clinical trials (e.g. identify people who may be suitable for a new product/service)
  • Development of clinical decision support systems (e.g. link data on individual’s health with best practice to influence treatment choices)
  • Health services research relevant to public health (e.g. examine the health service utilisation patterns for potentially avoidable hospitalisations; research that leads to changes in other government policies, such as welfare, and ultimately reduces impact on the health system).

A review will be performed after two years, which may identify additional uses.

The MyHR 'withdraw participation button’

Consumers can stop their My Health Record (MyHR) data being used for secondary purposes by pressing the ‘withdraw participation button’.

Not permitted 

The following uses of MyHR data are not permitted:

  • Determination of funds allocation for a health service (e.g. set the level of funds allocated to an individual community health service)
  • Remuneration of individual clinicians (e.g. to make/modify payments)
  • Individual clinician audit (note: this does not exclude examining practice variations for the purposes of quality improvement or adherence to best-practice guidelines at a health service level).
  • Direct marketing to consumers
  • Assessment of insurance premiums and/or claims
  • Assessment of eligibility for benefits (e.g. use by Centrelink and/or the Australian Taxation Office to make determinations relating to an individual)
  • Criminal and/or national security investigations, except as required by law (e.g. use to investigate the interactions of individuals with the health system as part of assessing their behaviour).

Withdrawing participation

Data that has been removed or classified by consumers as ‘restricted access’ will not be retrieved for secondary use purposes. Similarly, when people cancel their MyHR record, the data will no longer be used.

Consumers can stop their data being used for secondary purposes by clicking on the ‘withdraw participation button’. It is expected that a dynamic consent model will be introduced later, which allows consumers to give consent for secondary use on a case-by-case basis (which would also open the door for the use of identified data).

In the light of the recent Facebook Cambridge Analytica Scandal I suspect that many consumers will press the button – or will be advised by health professionals to do so.

13 thoughts on “This is how your data in the My Health Record will be used

  1. Hi Ed,

    Will the Government be paid by researchers and by commercial entities in order to access and use the data ?

    Will that payment flow into consumers whose data is used ?

    There was mention in the secondary framework of use of data for re-identification of data in “some” circumstances. Was this explicitly stated what those circumstances were?


  2. Pingback: This is how your data in the My Health Record will be used • The Medical RepublicThe Medical Republic

  3. An interesting, if not unsettling read Edwin. ”

    As a longterm user of Medical Director I have noticed that scripts and pathologyrequests are now defaulting to being sent to the MHR. Interestingly enough the prompts/default settings are the same whether the patient has an active MHR or not.
    It does make one wonder if the data gathering will continue for those who chose to not participate. They will simply not be able to see it happening.


  4. Reblogged this on Dr Thinus' musings and commented:

    An interesting and somewhat unsettling post about the secondary use of the MHR data.

    The data being collected is extensive – every script and investigation that I order on my software is now being sent the the My Health Record as a default setting. Interestingly enough this seems to be the case for all patients – even if they do not have a My Health Record profile


  5. I think it is pretty clear that there are many people will benefit from the MHR. But its purpose is not clinical care but data collection. Its purpose is not so much patient care.
    When there are people with vested interests who then promote an inside view of the patient healthcare experience this is concerning as mission creep occurs. Notwithstanding the claims that this will make the whole experience of healthcare safer which given safety is complex and involves humans seems a rather large ambit claim.

    I understand the public uses of data but there is much yet to be worked upon including Thinus comment above and for those who object to the uploading of their data will there be some kind of bureaucratic penalty or bureaucratic coercion? Eventually, will it become impossible to administer interactions with Govt. without an MHR regardless of the particular persons need or request for privacy?

    The ethics need a considerable amount of working through in my opinion.

    Great work Edwin. I am looking forward to the GPDU18 debate on this. I am so glad you are chairing it.

    Liked by 1 person

  6. Noting that data from MyHR cannot be used to affect the remuneration of clinicians, can any description of manipulation of the data be used to affect the income of administrators e.g. bonuses for achieving targets (kpi)?


  7. As a nurse, I have to wondr if the data in my health record could be accessed when applying for new positions. There are so many ways the information could be misused.


  8. Pingback: It’s not just the My Health Record we should be concerned about | Doctor's bag

  9. Pingback: It’s not just the My Health Record we should be concerned about • The Medical RepublicThe Medical Republic

  10. Pingback: My Health Record: what’s next? | Doctor's bag

I'd love to hear from you! Please leave a comment:

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.