If you're in media and wondering if this needs more coverage, here's your answer. #MyHealthRecord #Privacy
I've you're planning to opt out, I'd suggest maybe not doing it today, but definitely not waiting too long.
#MyHealthRecord #Privacy
As a journalist with strong interests in tech and privacy, I really want to see the system for myself. Kick its tyres and experience its flaws and limitations personally. But ...
#MyHealthRecord #Privacy
The one that tipped the balance is that it's impossible to have your record removed once you have one. #MyHealthRecord #Privacy
To my knowledge it's little more than a document store at this point. 'Flinstonian' feels like an apt description for such a system.
#MyHealthRecord #Privacy
And don't these problems all have better solutions than MHR? #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiRcSiRUwAEbuhC.jpg)
![](https://pbs.twimg.com/media/DiRenqOVMAAo38t.jpg)
Except you can't. Record access logs only available by organisation—a fact left out of the FAQ but uncovered by diligent reporting by @arielbogle abc.net.au/news/science/2… #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiRiKDtUcAAF23-.jpg)
But the bit that's left out of that is that it only happens the *first* time a new *organisation* accesses it. #MyHealthRecord #Privacy myhealthrecord.gov.au/for-you-your-f…
Except that the entire scheme is run by the government.
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiRk3qNU0AAtqOa.jpg)
#MyHealthRecord #Privacy
#MyHealthRecord #Privacy
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiRnEpJUYAAqdt6.jpg)
#MyHealthRecord #Privacy
But if that is the case, why does the law authorise it?
The patient would be informed 'if it was relevant'.
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiRsMd0UwAU_M-3.jpg)
#MyHealthRecord #Privacy
And you have to monitor it manually because alerts are only sent for the *first* access via each organisation. #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiScrZQU8AES-j0.jpg)
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DiWKDUUUYAAgGQe.jpg)
![](https://pbs.twimg.com/media/DiWKEFjU0AAQwUi.jpg)
Default privacy permissions are very powerful, an issue explored at length by investigations into Facebook.
#MyHealthRecord #Privacy
The case for opting-out: theconversation.com/my-health-reco…
The case for opting-in (i.e. doing nothing): theconversation.com/my-health-reco…
I might post some analysis of each piece tomorrow if I get the chance.
#MyHealthRecord #Privacy
Looks like @OAICgov has even more work is not properly funded for.
![](https://pbs.twimg.com/media/DilV5jbVAAETJHw.jpg)
I'll start with the case for doing nothing, because it will be the longest. #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/Dilgh3rVMAA7lNW.jpg)
I don't see how anyone could claim this isn't a 'top-down "grand plan"'.
No evidence is advanced for the assertion that it's more responsive to needs of consumers and health professionals. #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DilhZ_gUYAA8pTt.jpg)
![](https://pbs.twimg.com/media/Dilkfs5UYAUCfMX.jpg)
![](https://pbs.twimg.com/media/DillUdvU8AABygW.jpg)
health.gov.au/internet/main/…
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DilmFi0U8AAdxyN.jpg)
But what kind of research is undefined.
You can opt-out of that but you have to take an explicit action to do so. #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DilqqsLW0AAme4a.jpg)
First, this is simply untrue.
PCHR was the subject of at least two data breaches assessed by the Privacy Commissioner theregister.co.uk/2014/10/29/aus… #MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DilrZiQU8AEbnzo.jpg)
![](https://pbs.twimg.com/media/Dils0UOX0AALsUo.jpg)
![](https://pbs.twimg.com/media/Dilt9THUwAAP-OQ.jpg)
It's correct that there are a lot of potential benefits from linking systems and data, but there are already well known privacy failures around this data. oaic.gov.au/privacy-law/co…
#MyHealthRecord #Privacy
![](https://pbs.twimg.com/media/DilvFJoV4AIj4x_.jpg)
Secondary use should also be explicitly and separately opt-in for each case.
Privacy controls should be private by default. Don’t give 10s thousands access by default #MyHealthRecord
Nearly a million people will be able to access your record without asking. #Privacy
![](https://pbs.twimg.com/media/DinpbufU0AAAh73.jpg)
![](https://pbs.twimg.com/media/Dinrf4cUwAE1RBh.jpg)
![](https://pbs.twimg.com/media/DixlppLVAAAaeTD.jpg)
![](https://pbs.twimg.com/media/DixlrJUUEAAGrck.jpg)
![](https://pbs.twimg.com/media/Di04jupU4AAUn-m.jpg)
The power of defaults to unexpectedly compromise privacy should not be underestimated.
#MyHealthRecord #Privacy
#MyHealhRecord is now another big example of Au gov't project enshrining poor privacy in law and practice.
Follow for good insight into #Privacy issues.
@SalingerPrivacy @DrMoniqueMann @VTeagueAus @LiamPomfret
![](https://pbs.twimg.com/media/DjAGDhvUwAAEb0X.jpg)