{"id":"F2024L00391","name":"Privacy (Guidelines issued under section 95AA) Approval 2024","slug":"privacy-guidelines-issued-under-section-95aa-approval-2024","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":105148,"registerId":"commonwealth-F2024L00391-current","compilationNumber":null,"startDate":"2026-04-03","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"Privacy (Guidelines issued under section","sectionType":"part","heading":"Privacy (Guidelines issued under section 95AA) Approval 2024","content":"# Privacy (Guidelines issued under section 95AA) Approval 2024\n\nI, Angelene Falk, Australian Information Commissioner, hereby approve pursuant to section 95AA of the Privacy Act 1988 (Cth) (Privacy Act) guidelines issued by the Chief Executive Officer of the National Health and Medical Research Council (NHMRC) that relate to the use and disclosure of genetic information of an individual to that individual’s genetic relatives, namely, Use and disclosure of genetic information to a patient’s genetic relatives under Section 95AA of the Privacy Act 1988 (Cth) – guidelines for health practitioners in the private sector (updated 2024).\n\nUnder section 95AA, for the purposes of paragraph 16B(4)(c) of the Privacy Act, I may approve guidelines that relate to the use and disclosure of genetic information for the purposes of lessening or preventing a serious threat to the life, health or safety of an individual who is a genetic relative of the individual to whom the genetic information relates.\n\nThe guidelines issued by the NHMRC set out how health practitioners in the private sector may use and disclose genetic information about a patient to the patient’s genetic relatives, in circumstances where the patient has not consented to such use and disclosure. They also set out how health practitioners should first discuss with the patient the need for the use or disclosure and attempt to obtain the consent of the patient.\n\nThis approval has the effect of repealing the Approval by the Privacy Commissioner of guidelines issued under section 95AA of the Privacy Act 1988 (March 2014, FRLI F2014L00244).\n\nThis approval takes effect on 1 April 2024.\n\n\\[signed\\]\n\nAngelene Falk\n\nAustralian Information Commissioner\n\n25 March 2024\n\nNote: The name of this instrument was amended on registration as the instrument as lodged did not have a unique name (see subsection 10(2), Legislation Rule 2016).","sortOrder":0}],"analysis":{"kimi_summary":{"content_quality":"ok","complexity_score":3,"scope_assessment":{"changed":false,"description":"The instrument performs exactly the function intended by section 95AA of the Privacy Act 1988 — approving guidelines for genetic information disclosure to relatives. It does not expand beyond this specific statutory purpose."},"complexity_factors":["Single-purpose instrument: only approves one specific set of guidelines","No defined terms within the instrument itself (relies on external Privacy Act definitions)","Minimal conditional logic: one primary condition (section 95AA approval power)","Short length: approximately 250 words of substantive content","Clear statutory hook: explicitly references section 95AA and paragraph 16B(4)(c) of the Privacy Act","Simple temporal operation: single commencement date (1 April 2024) with explicit repeal of previous instrument"],"plain_english_summary":"The Information Commissioner has legally approved new NHMRC 2024 guidelines letting private-sector health practitioners share a patient’s genetic information with at-risk blood relatives without the patient’s consent—but only where a serious, imminent health risk to those relatives exists and after practitioners have tried and failed to obtain the patient’s consent. It replaces the 2014 guidance and affects private clinicians, patients undergoing genetic testing, and their genetic relatives."},"flash_summary":{"complexity_score":3,"scope_assessment":{"changed":true,"description":"This approval replaces the earlier March 2014 approval, so the operative instrument governing non‑consensual disclosure of genetic information by private health practitioners is changed. The instrument itself does not state whether the substantive legal criteria differ from the 2014 approval; it confirms updated NHMRC guidelines now apply and take effect on 1 April 2024."},"complexity_factors":["Cross-reference to Privacy Act section 95AA and paragraph 16B(4)(c) requiring legal interpretation of statutory criteria","Operational requirement that practitioners attempt to discuss and obtain patient consent before non‑consensual disclosure","Discretion placed on health practitioners to determine when a \"serious threat\" to life, health or safety exists","Interaction with existing privacy obligations and the replaced 2014 approval (repeal effect)","Limited sectoral scope (private‑sector health practitioners) but potential cross‑impact on patients and genetic relatives","Specified effective date (1 April 2024) requiring implementation and compliance planning"],"plain_english_summary":"This instrument approves NHMRC guidelines (under section 95AA of the Privacy Act) that allow private‑sector health practitioners to use or disclose a patient’s genetic information to the patient’s genetic relatives without the patient’s consent when needed to lessen or prevent a serious threat to a relative’s life, health or safety. Practitioners must first discuss the matter with the patient and try to obtain consent. The Commissioner’s approval repeals the 2014 approval and takes effect 1 April 2024 (see para 16B(4)(c))."},"flash_summary_failed":{"failed":true,"reason":"A positive credit balance is required for all requests, including BYOK, so fallback providers remain available. Add credits at https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%3Fmodal%3Dtop-up to continue.","source":"analysis-cron"}},"importantCases":[],"_links":{"self":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024","history":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024/history","analysis":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024/analysis","conflicts":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024/conflicts","importantCases":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024/important-cases","documents":"/api/acts/privacy-guidelines-issued-under-section-95aa-approval-2024/documents"}}