Skip to main content

My Health Record system security

Keeping your information private and secure.

There are people, processes, technologies and legislation keeping the information in your record safe and secure.


The My Health Record system is monitored by the Cyber Security Centre within the Australian Digital Health Agency. All personnel involved with the administration of the system undergo security checks.


A range of security processes limit access to the My Health Record system. External software goes through a conformance process before it is allowed to connect to the system. This includes healthcare provider software and mobile applications.


We use a range of technologies to protect the sensitive personal and health information held in the My Health Record system, including: 

  • firewalls to block unauthorised access
  • audit logs to track access to records
  • initial and regular anti-virus scanning of documents uploaded to records
  • system monitoring to detect suspicious activity


The privacy of information in the My Health Record system is protected by legislation:

Significant penalties apply for deliberate misuse of this information.

Find out more about My Health Record governance and legislation.