My Health Record Clinical Document

Populated clinical documents from or for the My Health Record system: shared health summaries, event summaries, specialist letters, eReferrals, pharmacist shared medicines lists, advance care planning documents and the Prescription and Dispense / Medicines Information views, when they carry patient identifiers (IHI, name, DOB, Medicare) and My Health Record provenance. Printed or exported copies of these documents leave the national system through clinic shared drives, email and patient correspondence. Boundary: hospital discharge summaries and referral letters belong to au-qld-health-discharge-summary-referral and general medical records to au-qld-health-medical-record; a bare IHI value is au-individual-healthcare-identifier.

Type: regex
Engine: boost_regex
Confidence: medium
Confidence justification: Medium: the document type names are fixed by the My Health Record system and enforce tiers need a populated patient field plus explicit My Health Record provenance. "Event summary" also appears in IT and security reporting, which lacks the provenance and stays at 65. Copies with the provenance header stripped will be missed at 75/85.
Jurisdictions: au
Regulations: My Health Records Act 2012 (Cth), Healthcare Identifiers Act 2010 (Cth), Privacy Act 1988 (Cth), NDB Scheme (Cth), Information Privacy Act 2009 (Qld)
Frameworks: ISO 27001, ISO 27701, QGISCF
Data categories: phi, health, pii
Scope: narrow
Risk rating: 8
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:shared\s+health\s+summary|event\s+summary|specialist\s+letter|e-?referral|pharmacist\s+shared\s+medicines\s+list|advance\s+care\s+planning\s+document|prescription\s+and\s+dispense\s+view|medicines\s+(?:information\s+)?view)\b

Corroborative evidence keywords

My Health Record, IHI, document author, adverse reactions, medications, HPI-O

Proximity: 300 characters

Should match

SHARED HEALTH SUMMARY - uploaded to My Health Record Patient: Jordan Teston IHI: 8003600000000001 Document author: Dr K Teston, Riverbend Medical Practice Medications: Metformin 1 g BD; Atorvastatin 20 mg nocte Adverse reactions: Penicillin - urticaria — 85 tier - shared health summary with IHI, My Health Record provenance, author, medications and adverse reactions
Event summary (My Health Record) Date of birth: 19/07/1984 Medicare number: 0000 00000 0 Clinical synopsis: Laceration left forearm sutured at after-hours clinic, review in 7 days — 85 tier - event summary with DOB, Medicare, provenance and clinical synopsis
Specialist letter - My Health Record view Patient name: Riley Teston DOB: 02/02/1950 — 75 tier - specialist letter with patient fields and provenance but no document content

Should not match

Fact sheet: what is a shared health summary? Your GP can upload a shared health summary to your My Health Record so other providers can see your medicines, allergies and immunisations. Ask your practice about consent. — Agency / PHN fact sheet about the document type (65 at most)
Event summary Name: web-prod-03 Severity: High The failover completed at 02:14 and the incident ticket was closed. — IT event summary with a populated name field and no My Health Record provenance (65 at most)
Shared health summary (My Health Record) Patient name: ____________________ IHI: ____________________ Medications: ____________________ Adverse reactions: ____________________ — Blank shared health summary form (65 at most)
My Health Record webinar for practice managers: registering your HPI-O, assigning NASH certificates and setting up the conformant clinical software. — Training webinar text without a document type or patient (no match)

Known false positives

Australian Digital Health Agency, PHN and practice fact sheets and webinars that describe shared health summaries and event summaries. Mitigation: No populated patient field, and fact sheet, webinar, training and guidance framing is excluded from enforce tiers.
IT, security and operations reports titled "event summary". Mitigation: They carry no My Health Record provenance, so they stay at 65.