Privacy and scope concerns
Critics warned that default sharing of sensitive medical information could go too far unless Parliament closely checked the privacy settings, the detailed rules and exactly which providers would be captured.
This bill became law on Feb 14th, 2025.
Health, care & disability
Some healthcare corporations must join My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. and upload certain patient information after care, unless a stated exception applies, so sharing moves from optional to expected for covered services.
The Strengthening Medicare TaskforceThe review body whose 2022 report recommended moving from optional sharing to default sharing of key health information. found that optional My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. sharing left clinicians without real-time health information in a connected system. The bill requires some health corporations to upload key care information to My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. by default, with patient and safety exceptions, and ties some MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. payments to timely sharing.
My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. already existed, but sharing key clinical information into it was still optional, and the 2022 Strengthening Medicare TaskforceThe review body whose 2022 report recommended moving from optional sharing to default sharing of key health information. said that left clinicians without the real-time information needed for a modern connected health system. The bill responded by shifting some corporate providers to sharing by default, while keeping patient and safety exceptions and linking some MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. payments to timely uploads, before Parliament passed it in February 2025 and Royal AssentThe final formal step that turns a passed bill into an Act of Parliament. turned the change into law.
The main criticism was that making health information sharing the default could weaken privacy protections and expand the scheme before Parliament had properly tested the rules, safeguards and which providers would be forced to comply. Those concerns were raised mainly as calls for further scrutiny by the Coalition and Greens, while a sharper privacy objection from One Nation did not gain Senate support.
Hon Mark Butler MP introduced this bill. It passed on the voices.
Did it become law?
Yes
Became law 14 Feb 2025
Final passage
Passed without a counted vote
2 recorded amendment or procedural votes were found, but no counted vote on the bill itself was recorded.
Passage speed
85 days
From introduction to the latest recorded parliamentary step
Meaning
Some healthcare corporations must join My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. and upload certain patient information after care, unless a stated exception applies, so sharing moves from optional to expected for covered services.
Patients keep control because information still cannot be uploaded if they say no, and a clinician can also withhold it over a serious safety or wellbeing concern.
Covered providers can still claim MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. first for some services, but if they do not upload the required information on time and cannot prove an exception, the Commonwealth can recover that payment as a debt.
Providers who rely on an exception must keep proof for 2 years, and if they are not currently sharing to My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. they must clearly tell patients in clinics, on websites and in online booking systems.
The law gives government agencies limited powers to use My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. and MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. data to check compliance, and it allows compliance information to be shared with the Australian Commission on Safety and Quality in Health CareThe national body that can receive limited compliance information and may feed compliance expectations into accreditation standards. without sharing patients’ personal health details.
Under the framework, constitutional corporations providing health services will be required to register with My Health Record and to upload health information to healthcare recipients’ My Health Records.Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum
Amendments to the My Health Records Act and Health Insurance Act both provide exceptions to the share by default requirements. Currently, information cannot be uploaded to an individual’s My Health Record against their wishes, and this Bill confirms that right by providing that an individual’s wish to not have their information uploaded is a valid exception to the share by default requirement. An individual’s privacy is further safeguarded by a discretion that can be exercised by healthcare providers that sharing the individual’s health information would be detrimental to their health, safety or wellbeing.Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum
If a healthcare provider or their associated healthcare provider organisation have not uploaded the required information within the prescribed timeframe and are unable to provide any evidence of an upload exception applying, the amendments will apply such that the payment will become a debt recoverable by the Commonwealth. Medicare benefits that are recoverable, will be able to be pursued as a debt or be off set against future amounts payable to the healthcare provider.Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum
the healthcare provider organisation must keep evidence that an upload exception applied for a period of 2 years starting on the date the healthcare is provided, that meets the requirements, if any, specified in the My Health Records Rules. The Rules will enable further specifics about the evidence required to be detailed where it may be necessary for clarity and consistency.Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum
The Australian Commission on Safety and Quality in Health Care oversees accreditation standards for healthcare providers. Compliance with share by default provisions are expected to be relevant to future accreditation standards for prescribed healthcare providers. Disclosures to the Commission will not contain the personal or health information of individual healthcare recipients.Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum
Context
My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. already existed, but sharing key clinical information into it was still optional, and the 2022 Strengthening Medicare TaskforceThe review body whose 2022 report recommended moving from optional sharing to default sharing of key health information. said that left clinicians without the real-time information needed for a modern connected health system. The bill responded by shifting some corporate providers to sharing by default, while keeping patient and safety exceptions and linking some MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. payments to timely uploads, before Parliament passed it in February 2025 and Royal AssentThe final formal step that turns a passed bill into an Act of Parliament. turned the change into law.
Strengthening Medicare TaskforceThe review body whose 2022 report recommended moving from optional sharing to default sharing of key health information. calls for sharing by default
The taskforce report said real-time health information was critical to a modern connected healthcare system and recommended that key information be shared to My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. by default rather than by exception.
Health Legislation Amendment (Modernising My Health Record—Sharing by Default) explanatory memorandum ↗Minister says MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time. needs digital records to catch up
In his second reading speech, Mark Butler argued that health technology had moved far beyond MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time.'s paper-era foundations and that the system needed more routine electronic sharing of care information.
Hansard ↗Government introduces the sharing-by-default bill
The bill was introduced to require some constitutional corporations providing health services to register with My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. and upload specified information, subject to patient and clinical safety exceptions.
Parliamentary timeline ↗House passes the bill
The House completed debate and third reading, sending the proposal to the Senate after the government set out a new compliance model tied to some MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time.-funded services.
Parliamentary timeline ↗Parliament passes the bill
Both houses passed the bill in the same form, clearing the way for My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. upload obligations and MedicareThe public health scheme whose benefit payments are linked here to whether some providers upload the required information on time.-linked enforcement powers to become law.
Parliamentary timeline ↗Royal AssentThe final formal step that turns a passed bill into an Act of Parliament. makes the changes law
Royal AssentThe final formal step that turns a passed bill into an Act of Parliament. completed the legislation so the Commonwealth could establish the legal framework for mandatory default sharing rules through later subordinate instrumentsLower-level legal rules made later under the Act that set the detailed requirements for which services, records and timelines are covered..
Parliamentary timeline ↗Legislative route
The bill was formally presented to the chamber and read a first time, which starts its parliamentary journey.
Introduced and read a first time
A minister or sponsoring member moved the second reading, opening the main debate on the bill's purpose and principles.
Second reading moved
The bill reached this recorded parliamentary step.
Referred to Federation Chamber
The bill reached this recorded parliamentary step.
Second reading debate
The chamber agreed to the bill at second reading, meaning it accepted the bill in principle and allowed it to continue.
Second reading agreed to
The bill reached this recorded parliamentary step.
Reported from Federation Chamber
The chamber agreed to the bill at third reading, which completed passage through that chamber.
Third reading agreed to
Referred to Committee (28/11/2024): Senate Community Affairs Legislation Committee; Committee report (30/01/2025)
Referred to committee
APH bill page notesThe bill was formally presented to the chamber and read a first time, which starts its parliamentary journey.
Introduced and read a first time
A minister or sponsoring member moved the second reading, opening the main debate on the bill's purpose and principles.
Second reading moved
Considered by scrutiny committee (05/02/2025): Parliamentary Joint Committee on Human Rights; Report 1 of 2025
Considered by scrutiny committee
APH bill page notesConsidered by scrutiny committee (05/02/2025): Senate Standing Committee for the Scrutiny of Bills; Scrutiny Digest 1 of 2025
Considered by scrutiny committee
APH bill page notesThe chamber agreed to the bill at second reading, meaning it accepted the bill in principle and allowed it to continue.
Second reading agreed to
The chamber agreed to the bill at third reading, which completed passage through that chamber.
Third reading agreed to
Both houses passed the bill in the same form, completing parliamentary passage.
Finally passed both Houses
The Governor-General gave Royal AssentThe final formal step that turns a passed bill into an Act of Parliament., turning the bill into an Act.
Key criticism
The main criticism was that making health information sharing the default could weaken privacy protections and expand the scheme before Parliament had properly tested the rules, safeguards and which providers would be forced to comply. Those concerns were raised mainly as calls for further scrutiny by the Coalition and Greens, while a sharper privacy objection from One Nation did not gain Senate support.
No party represented in the debate opposed the bill outright, but privacy and implementation concerns prompted calls for closer review.
Privacy and scope concerns
Critics warned that default sharing of sensitive medical information could go too far unless Parliament closely checked the privacy settings, the detailed rules and exactly which providers would be captured.
Provider burden and implementation risk
Another concern was that providers could face practical and compliance pressures from mandatory uploading requirements, so the scheme should be examined further before the Senate settled its final position.
Further sources
Votes
The bill passed both chambers on the voices. The counted divisions below were about amendments or procedure, not final passage.
House agreed to the bill's third reading on the voices, so there is no list of individual Aye and No votes for final passage in that chamber.
Passed on the voices
In a voice vote, members call out Aye or No and the presiding officer judges which side has it. Individual names are only recorded if a formal division is called.
Senate agreed to the bill's third reading on the voices, so there is no list of individual Aye and No votes for final passage in that chamber.
Passed on the voices
In a voice vote, members call out Aye or No and the presiding officer judges which side has it. Individual names are only recorded if a formal division is called.
Amendments grouped by chamber. These cards include amendment outcomes recorded without a counted division.
Senate
Defeated 12 to 23. Support came from Greens, Australia's Voice, and minor parties and independents. Opposition came from Labor, Liberal Party, and minor parties and independents.
The Senate rejected the proposed second-reading statement, so the bill proceeded without the added call for prison health record reforms.
Defeated 14 to 23. Support came from Greens, Australia's Voice, and minor parties and independents. Opposition came from Labor, Liberal Party, and minor parties and independents.
The Senate rejected the package, so the bill continued without the proposed second-reading statement and requested amendments for prison health access.
The Senate rejected Senator Roberts' second-reading proposal on voices; it would have added a statement that Australians are worried about the privacy and security of centralised digital IDs and that sharing sensitive medical information by default breaks the original My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. promise.
Defeated on voices
The chamber decided this amendment without a counted division, so there is no list of individual Aye and No votes.
These are amendment votes, not the final passage vote on the bill itself. The bill passed both chambers on the voices.
Parliamentary debate
Start here — lead voices
Mark Butler strongly supports the bill and says it will modernise My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default. by making sharing by default the norm for key health information, starting with pathology and diagnostic imaging.
Read in Hansard ↗Archer says the coalition will not oppose the bill and supports My Health RecordAustralia's national digital health record system, which this bill makes some providers upload key care information to by default., but wants it referred to the Senate for further scrutiny over privacy, the scope of the rules, and which providers will be required to comply.
Read in Hansard ↗Bates says the Greens will support the bill in the House because they back better coordination in health care and stronger security for personal health data.
Read in Hansard ↗All speeches by bloc
1 speaker · 1 support
“The reforms I introduce today introduce a framework that will require key health information to be shared to patients' My Health Record.”Read the full speech in Hansard ↗
1 speaker · 1 support
“The coalition will not oppose the Health Legislation Amendment (Modernising My Health Record—Sharing by Default) Bill 2024 passing the House. However, while the coalition supports My Health Record and patients having more timely access to their records, the coalition will be seeking to refer the bill to committee in the Senate for further scrutiny. We want the committee to fully explore any potential issues related to the bill around privacy as well as to achieve a greater understanding of which other health providers will also be subjected to the new mandated requirements.”Read the full speech in Hansard ↗
1 speaker · 1 support
“The Greens will be supporting the Health Legislation Amendment (Modernising My Health Record—Sharing by Default) Bill 2024 in the House of Representatives and reserving our position in the Senate. We are in support of effective care pathways to promote greater cooperation and coordination between health services and systems. Furthermore, the Greens believe that health information and data linked to identifiable individuals should be stored with the best up-to-date security systems and protocols.”Read the full speech in Hansard ↗
Record
House · Introduced and read a first time
Introduced
The bill was formally presented to the chamber and read a first time, which starts its parliamentary journey.
House · Second reading moved
Second reading opened
A minister or sponsoring member moved the second reading, opening the main debate on the bill's purpose and principles.
House · Referred to Federation Chamber
Referred to Federation Chamber
The bill reached this recorded parliamentary step.
House · Second reading debate
Second reading debate
The bill reached this recorded parliamentary step.
House · Second reading agreed to
Second reading agreed
The chamber agreed to the bill at second reading, meaning it accepted the bill in principle and allowed it to continue.
House · Reported from Federation Chamber
Reported from Federation Chamber
The bill reached this recorded parliamentary step.
House · Third reading agreed to
Third reading agreed
The chamber agreed to the bill at third reading, which completed passage through that chamber.
Senate · Introduced and read a first time
Introduced
The bill was formally presented to the chamber and read a first time, which starts its parliamentary journey.
Senate · Second reading moved
Second reading opened
A minister or sponsoring member moved the second reading, opening the main debate on the bill's purpose and principles.
Senate · Second reading agreed to
Second reading agreed
The chamber agreed to the bill at second reading, meaning it accepted the bill in principle and allowed it to continue.
Senate · Third reading agreed to
Third reading agreed
The chamber agreed to the bill at third reading, which completed passage through that chamber.
Parliament · Finally passed both Houses
Passed both houses
Both houses passed the bill in the same form, completing parliamentary passage.
Assent · Assent
Assent
The Governor-General gave Royal AssentThe final formal step that turns a passed bill into an Act of Parliament., turning the bill into an Act.
Senate Community Affairs Legislation Committee; Committee report (30/01/2025)
Referred to committee
Referred to Committee (28 Nov 2024): Senate Community Affairs Legislation Committee; Committee report (30 Jan 2025)
APH bill page notesParliamentary Joint Committee on Human Rights
Considered by scrutiny committee
Considered by scrutiny committee (5 Feb 2025): Parliamentary Joint Committee on Human Rights; Report 1 of 2025
APH bill page notesSenate Standing Committee for the Scrutiny of Bills
Considered by scrutiny committee
Considered by scrutiny committee (5 Feb 2025): Senate Standing Committee for the Scrutiny of Bills; Scrutiny Digest 1 of 2025
APH bill page notes