The Office of the Australian Information Commissioner (OAIC) plans to appraise how well general practices are complying with the security policy requirements of the Australian privacy principles when accessing the My Health Record system.

The OAIC has powers under the Privacy Act 1988 to conduct privacy assessments to provide an independent and systematic appraisal of how well an agency or organisation complies with all or part of its privacy obligations.