Health Services Act 1988

The Minister must cause an independent review of the operation of this Part, including the Privacy Management Framework, to be conducted by an expert panel after the second anniversary of the day on which this Part comes into operation.

The independent review must examine and make recommendations in relation to the following—

whether health information is sufficiently protected;

which health services should be participating health services for the purposes of this Part;

the misuse of specified patient health information;

the costs of compliance and the administrative burden imposed on participating health services by this Part;

whether the Electronic Patient Health Information Sharing System is operating as intended.

The independent review may examine and make recommendations in relation to the following—

current issues and trends relating to health information systems;

data management;

information technology security;

patient privacy;

any other relevant matter.

The independent review must be completed no later than the third anniversary of the day on which this Part comes into operation.

The Minister must cause a copy of a report of the independent review to be laid before each House of Parliament no later than 3 sitting days after the day on which the final report of the independent review is given to the Minister.

The Minister must consider any recommendations made by the independent review, including any recommendations to amend this Act, and within 18 months of receiving the final report—

implement the recommendations made by the independent review; or

advise Parliament why the recommendations have not been implemented.