Commonwealth Consolidated Acts Commonwealth Consolidated Acts(1) A person that is, or has at any time been:
(a) a registered healthcare provider organisation; or
(b) a registered repository operator; or
(c) a registered portal operator; or
(d) a registered contracted service provider;
must not contravene a My Health Records Rule that applies to the person.
Civil penalty: 100 penalty units.
(2) An entity (other than the System Operator, the Data Governance Board established by section 82 or the data custodian) must not contravene a requirement imposed on the entity by My Health Records Rules made for the purposes of subsection 109(7A), if the My Health Records Rules provide that the requirement is enforceable for the purposes of this subsection.
Civil penalty: 100 penalty units.