The MyHealth Record legislative framework has been updated to ensure the MyHealth Record system remains contemporary, clear and aligned with modern digital health practices.
The new MyHealth Records Regulations 2026 and MyHealth Records Rules 2026 modernise and clarify requirements, including those relating to security and record-keeping, while improving readability and supporting practical implementation across the sector.
The changes commenced on 1 April 2026.
- For existing participants (registered for MyHealth Record prior to 1 April 2026): you should aim to comply with the 2026 Rules as soon as possible. However, a six-month transition period will apply allowing you time to adapt. The transitional arrangements are in place from 1 April 2026 until immediately before 1 October 2026. During this period you can continue to apply the relevant sections of the 2016 Rule, including the record-keeping and the security and access policy requirements.
- For new participants (registered for MyHealth Record on or after 1 April 2026): you are required to meet the obligations set out in the 2026 Rules. The 2016 Rule has been repealed and no longer applies.
Importantly, the changes do not alter the purpose of the MyHealth Record system, reduce privacy or security protections, or change how consumers or healthcare providers interact with MyHealth Record system, and there is no reduction in privacy protections or consumer controls. Strong safeguards remain in place, and existing consumer-facing functionality continues unchanged.
The Department of Health, Disability and Ageing has published FAQs on these new Regulations and Rules. The Australian Digital Health Agency (Agency) is updating its public and educational material to reflect these changes.