My Health Record Overviews, Guides and Conformance Material v1.6

This document aids implementers of applications interfacing with the national My Health Record system by contextualising the PCEHR B2B interface with the PCEHR's Participation and Authorisation framework.

This document is limited to a high level overview of the key interaction scenarios and the operations used within those scenarios to interact with the My Health Record system.

Conformance requirements relevant for systems connecting to the My Health Record.

Use cases for clinical information systems connecting to the My Health Record system.

An amendment to the conformance requirements for clinical information systems connecting to the My Health Record system for assisted registration of a My Health Record record for an adult, child or newborn.

An amendment to the conformance test specification for clinical information systems connecting to the My Health Record system for assisted registration of an eHealth record for an adult, child or newborn.

The Agency is cognisant of the inherent cyber security risks posed by systems connected to and accessing the My Health Record system, as well as potentially vulnerable aspects of the national infrastructure and all services under its care. To address this risk, a set of security requirements for systems connecting to the My Health Record system have been identified, comprising controls related to application development and web development, with controls aligned to the Australian Cyber Security Centre’s (ACSC) Essential Eight Maturity Model. These controls are selected as the areas of the ACSC Information Security Manual (ISM) that are most relevant to the development of software for healthcare organisations.