(1) The System Operator must decide to register a person as a repository operator, a portal operator or a contracted service provider if:
(a) the person has made an application under section 47 for registration of that kind; and
(b) the person is eligible for registration of that kind under section 48.
(2) Despite subsection (1), the System Operator is not required to register a person as a repository operator, a portal operator or a contracted service provider if the System Operator is satisfied that registering the person may compromise the security or integrity of the My Health Record system, having regard to the matters (if any) prescribed by the My Health Records Rules.
(3) The System Operator may impose conditions on the registration.
(4) If the System Operator decides to register a person as a repository operator, the decision must specify the repositories to which the registration relates.
(5) A decision under subsection (1) takes effect when it is made.