Restrict access to your record

Set a record access code and control which healthcare organisations can access your record.

Manage who can access your record with a record access code

You can decide which of your healthcare provider organisations can access your record by setting a record access code (sometimes called a “RAC”). This is a 4-8 character code that you can set on your record at any time.

Once set, new healthcare provider organisations will not be able to view your My Health Record unless you provide them with your record access code.

The record access code applies to the healthcare organisation, rather than the individual healthcare provider. Other healthcare providers within the same organisation will also be able to view your record. The organisation only needs to enter the code once to access your record.

Healthcare providers can still upload documents to your record when a record access code is set, even if they don’t have your code. This ensures your important health information can always be added to your record, even by healthcare providers who cannot access other information in your record.

Setting a record access code may limit a healthcare provider's ability to access your medical information.

Before you set a record access code

A record access code allows you to control the access of new healthcare provider organisations that have not previously accessed your record.

If you set a record access code or change your code, any healthcare provider organisations that have already accessed your record and are on your Healthcare Provider Access list will have continued access to your record. If you don’t want them to have continued access, you must remove their access before you set your code.

Remember to always review your Healthcare Provider Access list before setting or changing a record access code, remove any healthcare provider organisations you don't want to have access, then set the record access code. This will prevent those organisations from having continued access.

How to set a record access code

To follow these steps, you will need to have My Health Record linked to your myGov account.

Sign in to your myGov account: Sign in to myGov
Select My Health Record from your list of ‘Linked services’
From your My Health Record welcome page, select the record you want to access
Click the Privacy & Access tab in the top navigation menu.
Select My Healthcare Organisations from the drop-down list. You will see a list of healthcare provider organisations who have access to your record.
If there are any healthcare organisations in this list who you don’t want to have continued access to your record, select Manage Access next to their name, select the Remove this healthcare provider organisation link under their name, then select Save. These healthcare providers will not be able to access your record once you’ve set your code.
Return to your healthcare provider organisations list. In All Other Healthcare Providers select Manage Access.
On the Limit healthcare organisation access to My Health Record page, set a 4-8 character code. Make a note of your code so you can give it to your chosen healthcare providers.
Re-enter the code and select Save

Access to your record once the code is set

Once a RAC is set, you will need to provide the code to any new healthcare provider organisations who you want to have access to your record.

Healthcare providers using a code will have access to clinical documents set to general access.

If a healthcare provider organisation has previously accessed your record (before you set a code), they will not need the access code. If once you’ve set a RAC you don’t want them to see your record any longer, you will need to revoke their access.

Healthcare providers that have not accessed your record for three years will need your code to access your information. For example, if you see your GP after more than three years, you will need to give them your code at your next visit so they can access your record.

Lost or forgotten your record access code?

You can find your code in the My Healthcare Organisations setting. You can also create a new code at any time.

If you change your code, you need to provide the new code only to healthcare providers who have not previously accessed your record.

Access in an emergency

Even if you have set a record access code, healthcare providers may choose to use a ‘break glass’ function to access your record, including any restricted documents, in a medical emergency. To see if your record has been accessed, go to access history in your record.

Need telephone support setting a record access code?

Call our help line 24/7 on 1800 723 471.

Online learning module

We have an online learning module to help you understand more about record access codes in My Health Record.

Access the online learning module