Integration of eScripts with My Health Record in Australia: Ensuring Secure Digital Prescriptions

Key Takeaways

• My Health Record integrates seamlessly with eScripts to provide patients with an up-to-date 'Medications View'.
• Patients have control over the sharing and privacy of their health information, with robust security and encryption standards in place.
• Healthcare workers must adhere to strict protocols for verifying patient identity and ensuring that prescriptions are accurately recorded.
• If you choose to opt out, you can control what is shared with My Health Record and restrict access as needed.

Electronic prescriptions (eScripts) in Australia form part of your overall consumer health data, including My Health Record (MHR). Together, they create a complete, up-to-date 'Medications View' reflecting your medication history. While designed for safety through 'sharing by default,' the system remains consumer-controlled with robust privacy features.

Understanding how eScript event summaries upload to MHR via the eScript Prescription Access system helps maintain a consistent digital health record. Learn more in our eScript Prescription Access guide. You stay in full control of your eScript Privacy & Security, just like with online medical certificates.

What Details are Displayed in My Health Record?

If you have a My Health Record and an eScript is issued, or your medication is dispensed, a file of that event will be sent to your My Health Record automatically, unless you have previously opted out.

The 'Medications View'

The shared data is very general and primarily for administrative purposes. It is more about the arrangements of your care than clinical discussions:

• Prescription Records: Includes the date of issue, the prescriber's name, and the medication quantity.
• Dispensing Records: Gives details of the pharmacy that supplied the medication and the date of supply.
• Metadata: Consists of the unique eScript Token IDs to assist with tracking repeats.
• Clinical Reasoning: Following the 2026 changes, telehealth and online prescribers may attach a high-level clinical reason for the prescription to assist other treating doctors. However, you have the right to request that this not be disclosed.

For further details on the legal aspects of these records, please refer to the required information on an official eScript.

Patient Control Over Sharing

The patient is central to My Health Record, and the patient controls many decisions about health data. With several features at your disposal, you can choose who is allowed to see your eScript record. These features are a core part of digital health consumer protections.

Privacy Settings and Access Codes

• Limited Document Access Code (LDAC): You can protect certain documents (e.g., a single prescription) with a code so that only health professionals you authorise can access them.
• Record Access Code (RAC): This allows you to 'lock' your entire record, so the next time a doctor wants to access it, they must first obtain a code from you.
• Viewing Logs: Any time another doctor or pharmacist views your record, it is recorded. You can find these records in the 'Access History' section of your privacy policy rules for prescription data.

How Pharmacies Update Dispensing History

Pharmacists are an important link in ensuring that your MHR reflects the most recent information. This is done by a simple act during the pharmacy confirmation eScript step.

Real-Time Syncing

• Automated Uploads: When a pharmacist fills your prescription token and issues the medication, their compatible software automatically sends a 'Dispense Record' to your MHR.
• Correct Measures: This is a great measure, so that if you need to see another doctor in the future, they can base their decision on the medicines you have actually used rather than what was originally prescribed.
• Care Continuity: The shared medical history serves as a supplement to up-to-date prescriptions, especially in cross-state prescription processes, where doctors from different states can access the patient's medication history.

Opting Out or Restricting Uploads

Although the entire operation is automated, you have the right, under applicable law, to refuse to share any or all of your information. See digital health law and consumer protection for more details.

Your Options

• Informed Consent: As part of your Prime Medic consultation, you can instruct your doctor not to upload a specific prescription to your My Health Record.
• Pharmacy Opt-Out: You can inform your pharmacist at the time of dispensing if you prefer that the 'Dispense Record' is not uploaded.
• Permanent Cancellation: You can cancel your My Health Record at any time. In such an event, all previously stored records, including eScript ones, will be erased without the possibility of recovery.

You can find more information on consent and data sharing for digital prescriptions in our guide.

Security and Encryption Standards

The system linking eScripts and My Health Record is among the most rigorously protected under the Digital Health Law worldwide.

• Encryption: Data is encrypted at a 'bank-grade' level during transmission and when stored in the cloud.
• Federal Oversight: The system is subject to proper oversight by the Office of the Australian Information Commissioner (OAIC) in partnership with the Australian Digital Health Agency.
• Emergency Access: In the event of a serious health crisis, a healthcare worker is authorised to use the 'Break Glass' facility to bypass privacy settings and access medication information; however, this action is strictly monitored and must be justified.