Skip to main content

My Health Record

Implementing My Health Record in your healthcare organisation

Find out how to establish policies, register your organisation, and access the system.

This page provides information for healthcare providers and organisations wanting to register with the Healthcare Identifiers (HI) Service and the My Health Record system, along with key points to consider before and after registration.

Follow the guidance in each section below to understand the process required to register your organisation.

Digital health foundations

Understanding healthcare identifiers

To be eligible to register to participate in digital health, including My Health Record,  electronic prescribing or secure messaging, your organisation will need to register for a Healthcare Provider Identifier - Organisation (HPI-O) from the Healthcare Identifiers Service (HI Service).

The HI Service is a national service for uniquely identifying healthcare providers, healthcare organisations and individuals receiving healthcare. It is the authoritative source of healthcare identifiers in Australia and a foundation component of national digital health products and services.

The three identifiers used in the HI Service are:

  • Individual Healthcare Identifier (IHI) uniquely identifies a patient (individual) receiving healthcare. This includes Australian citizens, permanent residents and visitors to Australia.
  • Healthcare Provider Identifier - Individual (HPI-I) identifies an individual healthcare provider who provides healthcare, such as general practitioners, allied health professionals, specialists, nurses, dentists and pharmacists, among others.
  • Healthcare Provider Identifier - Organisation (HPI-O) identifies the healthcare provider organisation that provides healthcare, such as a hospital, medical practice, pathology or radiology laboratory or pharmacy.

Use of healthcare identifiers is governed by the Healthcare Identifiers Act. The HI Act requires an organisation to take reasonable steps to protect healthcare identifiers from misuse, loss, unauthorised access, modification or disclosure.

Find out more about obligations for public health service providers.

The sections below guide you through the process to register your organisation in the HI Service and get an HPI-O.

Consider your healthcare organisation’s structure

Healthcare provider organisations participate in the My Health Record system as either:

  • a seed organisation only, or 
  • a network organisation that is part of a wider ‘network hierarchy’ (under the responsibility of a seed organisation).

A seed organisation is a legal entity that provides or controls the delivery of healthcare services. A seed organisation could be, for example, a local GP practice, pharmacy, private medical specialist, or the head office of a larger medical group. 

An example of a network organisation could be an individual department (e.g. pathology or radiology) within a wider metropolitan hospital. A network hierarchy operating in the My Health Record system consists of one seed organisation and one or more network organisations. All organisations will need to first register a seed organisation before establishing any network organisations.

Most healthcare provider organisations in Australia are independent – for example, suburban GP practices, pharmacies, private health specialists, or allied health care organisations. They will most likely participate in the My Health Record system as an independent seed organisation, rather than as part of a network hierarchy.

It is important for organisations to determine their structure within the HI Service before registering for My Health Record.

Larger medical groups or hospital groups are encouraged to contact the Agency help desk for support and to discuss considerations before determining their structure.

Phone: 1300 901 001 during business hours
Email: [email protected]

Consider key roles

Your seed organisation will identify staff for two key roles to be registered with the HI Service – the responsible officer (RO) and the organisation maintenance officer (OMO). A separate OMO can be identified for a network organisation.

Responsible officer (RO): this is the officer of an organisation who has authority to act on behalf of the seed organisation and relevant network organisations (if any) in its dealings with the System Operator of the My Health Record system. They’re responsible for a seed organisation’s interaction with the HI Service and ensuring its network organisations, authorised employees and contracted service providers comply with legislation.  For large organisations, the RO may be the chief executive officer or chief operations officer. For small organisations (such as a general practice) the RO may be a practice manager or business owner.

Organisation maintenance officer (OMO): this is the officer of an organisation who acts on behalf of a seed organisation and/or network organisations (if any) in its day-to-day administrative dealings with the HI Service and the My Health Record system. Healthcare organisations can have more than one OMO if they wish. In a general practice, this role may be assigned to the practice manager, if there is one, and/or other senior staff who are familiar with the practice's clinical and administrative systems. Alternatively, the RO may take on the OMO role as well, for example in a small practice.

The diagram below shows how this may look for a seed organisation.

Example HPI-O Structure

Find out more about the different roles in the HI Service.

Before registration

Before registering to participate in the My Health Record system, your organisation will need to have a security and access policy in place. For more information on policies and participation obligations, visit the link below.

Security and access policy

Register your organisation for an HPI-O and with the My Health Record system

The responsible officer (RO) of your organisation will need to register the organisation with the HI Service to get an HPI-O.

Register for a PRODA account

Provider Digital Access (PRODA) is an online authentication system for healthcare organisations to securely access government online services, such as Health Professional Online Services (HPOS).

Your organisation will need to identify who will be acting in the role of a responsible officer (RO). This person will be responsible for the practice and may be the owner or manager of the organisation. The RO will have primary responsibility for the practice's compliance with participation requirements, ensuring that the practice and its employees comply with the relevant legislation, policies and regulations.

This individual will need to register for a PRODA account if they don't already have one.

Helpful registration tips:

  • Ensure the name you register the account with has the same name as all your documents, or a Change of Name certificate is provided as supporting documentation.
  • Confirm the gender on the account matches the documents.
  • Confirm the DOB is entered correctly
  • The email address used to register the Individual PRODA account should not be a publicly accessible email address such as an admin account.

Register for a PRODA account

Link to Health Professional Online Service (HPOS)

When you first log in to PRODA, you will need to link to HPOS. Visit the Services Australia website to discover the steps to link HPOS to your PRODA account. You will then be able to access a range of eligible services using your PRODA log in.

Learn more

Register a seed organisation with the Healthcare Identifiers Service (HI Service)

Once the RO has registered for PRODA and linked HPOS to their account, they can register the organisation with the HI Service. This national service uniquely identifies healthcare organisations, healthcare provider individuals and individual healthcare recipients.

Once registered with the HI Service, your organisation is issued with a unique HPI-O number. This number is used to identify the organisation in a range of national digital health initiatives.

When you register the organisation to use the HI Service, you’ll need to include your healthcare organisation type.

From the HPOS ‘My programs’ page:

  1. Select the My Health Record and Healthcare Identifiers tile
  2. Select Healthcare Identifiers - Register seed organisation
  3. Complete the online form to register your seed organisation
  4. For more information, visit the Services Australia website.

Registering a seed organisation with the HI Service also registers the organisation for My Health Record.

Register any networked organisations

A network organisation provides services as part of a seed organisation, for example, a maternity ward in a hospital or a medical practice operating under a larger medical group.

If you’re registering a network organisation, you need to link it to either a seed organisation or another network organisation in the HI Service.

When you register a network organisation to use the HI Service, you’ll also need to include the healthcare organisation type.

Step 1: Register your network organisation in HPOS

You must be either an RO or an OMO of a seed organisations to register a network organisation. You need to link your new network organisation to either a seed organisation or another network organisation when registering.

To register a network organisation in the HI Service, log in to your PRODA account to access HPOS, then:

  1. Select My programs then Healthcare Identifiers and My Health Record.
  2. Select Manage Healthcare Identifiers.
  3. Select which seed or network organisation you want to link the organisation to.
  4. Select the My Organisation details, and then Add organisation.
  5. Follow the steps to create your new network organisation.

Once your request has been processed, the outcome will be sent to your HPOS inbox. This will include your new network organisation's HPI-O.

Once you have an HPI-O you, can register to access My Health Record (see below).

Step 2: Register your network organisation to access My Health Record

Once your network organisation has an HPI-O, the organisation's RO or OMO can register the network organisation in My Health Record.

When you register, you need to set access flags:

  • By choosing 'Yes' an access flag will be set for this organisation. Consumers can restrict access to their record by this organisation.
  • By choosing 'No' the access flag will be the same as the parent organisation. This network organisation will have access to the same health records as the parent organisation.

To set access flags, log in to your PRODA account to access HPOS, then:

  1. Select My programs then Healthcare Identifiers and My Health Record.
  2. Select My Health Record - Register Organisation then Healthcare Organisation Registration.
  3. Select an organisation from the list.
  4. Select which organisation you want to register and what access flags they should have, then Save Changes.
  5. If you agree to the terms, accept the Participation Agreement, and then select Register.

You’ve now registered your network organisation in the My Health Record system.

Obtain HPI-Is for all clinical staff who will be using My Health Record

All healthcare providers within your organisation will need to be uniquely identified using an HPI-I to access My Health Record. All Ahpra registered healthcare providers will already have an HPI-I.

Ahpra registered healthcare providers

Accessing your healthcare identifier

The following options can assist you in obtaining your HPI-I:

  • Option 1: You would have received your HPI-I in correspondence sent to you from Ahpra. If you no longer have your HPI-I, you can get it from the Ahpra website using your login account, or call Ahpra on 1300 419 495 Monday to Friday 9:00am - 5:00pm (AEDT). If you know your Ahpra User ID, simply add 800361 to the front of ID to get your HPI-I.
  • Option 2: Call the HI Service enquiry line on 1300 361 457 Monday to Friday 8:30am - 5:00pm (AEDT) and request your HPI-I.
  • Option 3: If your healthcare organisation is registered with the HI Service, your organisation maintenance officer (OMO) can retrieve your HPI-I from Health Professional Online Services (HPOS), provided you have consented to have your details published in the Healthcare Provider Directory (HPD).

Non-Ahpra registered healthcare providers

Eligibilty for healthcare providers not registered with Ahpra

If you are a healthcare professional in a field of practice not covered by Ahpra you may still be eligible for an HPI-I, provided that you meet the criteria for an individual healthcare provider set out in the Healthcare Identifiers Act 2010.

To be eligible, a healthcare professional must be a current member of a professional association that:

  • relates to the healthcare that has been, is, or is to be provided by the member, and
  • has uniform national membership requirements, whether or not in legislation.

If you believe you meet the above criteria and wish to obtain an HPI-I, see the Services Australia website for more information.

Setting up access 

In most healthcare settings, access to the My Health Record system is via conformant clinical software, the National Provider Portal, or hospital applications. 

Option 1: accessing via conformant software

Many common clinical information systems (CISs) conform to My Health Record and can connect directly to the system. This means that healthcare providers are generally able to access, view and upload information to a patient's record through their conformant CIS.

Click here to check whether your clinical software conforms to the standard.

To access My Health Record using conformant clinical software, your organisation needs either a National Authentication Service for Health (NASH) certificate or a Contracted Service Provider (CSP) number for linking.

Check with your software vendor whether you need to have a NASH PKI Certificate or whether they will be interacting with the system as a Contracted Service Provider (CSP).

Use a NASH PKI certificate:

Request and download a NASH PKI certificate

The National Authentication Service for Health (NASH) is used by healthcare organisations to securely access and share health information. A NASH Public Key Infrastructure (PKI) Certificate is required for access to the HI Service.

This certificate can be requested, linked and downloaded through HPOS by your organisation maintenance officer (OMO) or the responsible officer (RO).

Request and link NASH certificates

The RO or OMO needs to log on to your organisation's PRODA account, then select:

  1. Go to service on the HPOS tile
  2. My programs
  3. Healthcare Identifiers and My Health Record
  4. Healthcare Identifiers - Manage existing records
  5. My organisation details
  6. the Certificates tab.

When selecting the required organisation record, you may need to navigate to the correct record. Read more about Healthcare Identifiers Service for health professionals.

To request a NASH certificate:

  1. Select Request a NASH PKI site certificate
  2. Select either the Software Product or I cannot select a product because
  3. Enter a mobile number
  4. Tick the check box to confirm you have read and understood the terms and conditions
  5. Save changes and submit.

When your certificate is ready for downloading, your Personal Identification Code (PIC) will be sent in a text message. You need the code to activate the certificate.

For more information on NASH certificates please visit the NASH page.

or link a CSP number:

Link the software vendor's CSP number in HPOS

If your organisation uses software that connects to My Health Record, and the software vendor is a contracted servicer provider (CSP), you need to link the CSP in HPOS in order to connect to My Health Record.

What is a contracted CSP organisation?

A CSP organisation provides IT systems, health information management services or communication of health information on behalf of a healthcare provider organisation for HI Service or My Health Record purposes.

Check with your software vendor to confirm that they are a CSP, and get their 16-digital CSP number before completing the linking process.

Follow the steps in this guide for Contracted Service Provider Linking in HPOS (PDF, 311.37 KB).

Configure software

Once you have completed either the NASH or CSP linking process, contact your software provider to access support to appropriately configure your healthcare identifiers and certificates.

Option 2: accessing via the National Provider Portal (NPP)

Healthcare providers who do not have conformant clinical software, can access an individual’s record through the National Provider Portal (NPP). The NPP is a web-based, read-only site that lets healthcare providers view the information in a patient's record. Uploading documents is not supported.

To use the NPP, healthcare providers will need a Healthcare Provider Identifier – Individual (HPI-I) and to get set up first. Your organisation will need a Healthcare Provider Identifier - Organisation (HPI-O) and be registered to participate in My Health Record.

Set up access by linking the HPI-I to the organisation's HPI-O

For a healthcare provider representing a healthcare organisation to access the NPP, the responsible officer (RO) or organisation maintenance officer (OMO) must link the healthcare provider's HPI-I to the healthcare provider's HPI-O. This can be done by:

Once successful linking has occurred, healthcare providers representing the organisation can access the NPP.

If your organisation is not yet registered in the HI Service and My Health Record, see above.

Accessing and using the National Provider Portal (NPP)

  • Step 1: Log onto the NPP. Go to https://provider.ehealth.gov.au/login.html to access the portal.
  • Step 2: Click on the 'Login' button
    You will be redirected to the PRODA login page. Enter your username and password.
  • Step 3: Link your PRODA ID to the My Health Record system by entering your Identifier Number
    You will only need to complete the linking once.
  • Step 4: Select the organisation you are representing
    If you work for multiple healthcare provider organisations, please select the organisation you are representing in relation to your specific patient’s care.
  • Step 5: Search for the individual's record
    Once you log in, a search screen will appear. Add your patient’s information to the search screen to find their My Health Record. The information you enter must match their details recorded with Medicare.
    You must enter their: Last name, Date of birth, Sex, Identifier (IHI, Medicare or DVA number).

Log in to the National Provider Portal here:

Log in to National Provider Portal

Option 3: accessing via hospital applications

Most hospitals across Australia are already connected to the system. This means that authorised employees are generally able to access and view information in a patient’s My Health Record through the hospital's applications.

If you are working in a hospital or other healthcare setting, check with the health information manager or the local intranet for information on how to access My Health Record in your organisation’s applications.

Remember to check your organisation's access and use policy.

Hospitals that want to connect to My Health Record are encouraged to contact the Agency via our Help Desk.

HIPS mobile

HIPS mobile provides authorised employees with seamless access to their patients’ healthcare information and services, when and where they need it. It is available as an add on to existing HIPS software enabling the viewing of records on mobile devices, including mobile and tablets.

Benefits

Mobile access to HIPS allows for viewing of records on mobile and tablet where and when it is needed. This means:

  • Critical information is on hand and available to all clinicians while performing ward rounds, bedside consultations and remote care.
  • For emergency departments, this can mean saving time, when patient history needs to be accessed in an emergency - including medicines, pathology and immunisations.
  • Improved management of patient information for clinicians, who can now create specific ‘My Patient’ lists for each of the clinician’s work locations, and access records on and off site via the hospital’s VPN. This list syncs with the HIPS UI standalone view.

More information about HIPS

Train staff before use

Find resources to help you feel confident using the system. Detailed information, software summary sheets, training and support are all available here.

Education and training

Recommended training list (PDF, 185.62 KB)

Ensure your organisation is meeting ongoing participation obligations

Healthcare organisations must operate in accordance with relevant policies and legislation when participating in the system. Learn more about your ongoing participation obligations here.

Ongoing participation obligations

Date last updated: 30 September 2024