The My Health Records Rules 2026 (F2026L00392) establish comprehensive regulatory requirements for the Australian My Health Record system, authorized by the My Health Records Act 2012. The instrument contains 14 named provisions organized across two parts: Part 1 covers preliminary matters including definitions of authorized and nominated representatives of healthcare recipients, specifying persons to whom healthcare identifier requirements do not apply; Part 2 addresses System Operator functions including access control mechanisms that registered healthcare recipients can set, default access controls, and circumstances for automatic suspension or cancellation of access to a My Health Record.

Healthcare provider organisations, nominated representatives, and system administrators should review their access control procedures and record management practices to ensure compliance with these Rules, which take effect on 31 March 2026. Healthcare recipients and their authorized representatives should understand the new default access controls and automatic suspension/cancellation circumstances. The instrument supersedes prior My Health Records Rules and organisations should update their compliance documentation accordingly.