Australian Immunisation Register (Consequential and Transitional Provisions) Act 2015

The central concept is the Australian Immunisation Register (AIR), which replaces the Australian Childhood Immunisation Register. The AIR is a database of vaccination information kept by the Commonwealth under Part 2 of the Australian Immunisation Register Act 2015. Section 8 of that Act (as amended by Schedule 2 item 11) now establishes the “Australian Immunisation Register” rather than the “Australian Childhood Immunisation Register”. The register contains personal information about vaccinations administered to individuals of any age. It is not limited to children.

The purposes of the AI register are set out in section 10 of the principal Act (as amended by Schedule 2 items 15-20). These purposes include supporting Australian vaccination programs, checking an individual’s vaccination status, advising individuals (or their legal personal representatives) about vaccination, giving certificates or information to individuals, and conducting research. Importantly, subsection 10(2) now provides that for an individual incapable of managing his or her health affairs, the purposes also apply to a legal personal representative checking vaccination status or receiving advice, certificates, or information.

Legal personal representative is defined in section 4 of the principal Act (inserted by Schedule 2 item 3). It means (a) a parent or guardian if the individual is under 18, (b) a trustee of an estate if the individual is under a legal disability, or (c) a person holding an enduring power of attorney granted by the individual. This replaces the narrower concept of “parent or guardian” and extends representation rights to include enduring attorneys for otherwise capable adults who may still need assistance.

Recognised vaccination provider (previously “recognised immunisation provider” in the Family Assistance Act) has the same meaning as in the AIR Act. This class includes medical practitioners, nurses, pharmacists, and others authorised to administer vaccinations under Commonwealth, state, or territory law. Schedule 1 item 1 repeals and substitutes the definition in the Family Assistance Act to align with the AIR Act.

Protected information under section 22 of the AIR Act (which is amended by Schedule 2 items 29-32 to refer to the AI register) is information in the register that is not otherwise publicly available. The Act imposes strict limits on using or disclosing protected information, with penalties for unauthorised use.

The opt-out and non-disclosure mechanisms are introduced by Schedule 2 items 21 and 22. An individual may request that the Secretary not provide information about vaccinations to the individual (section 11(1) - this is an “opt out from receiving certain information from the register”). Separately, an individual may request (in the approved form) that personal information on the AI register not be disclosed for one or more purposes of the register (section 11(2) as substituted). This applies to the individual themselves, or if they are a legal personal representative of another individual incapable of managing health affairs, to that other individual.

Separate parts of the register are permitted by Schedule 3 item 1, which substitutes a new subsection 8(2). The register may be kept in parts that are separate from each other and called different names. The note gives the example of “Australian School Vaccination Register” for vaccinations given through school programs. This allows administrative segmentation without requiring separate legislative instruments.

The Act affects a broad range of actors because it transitions a childhood register to an all-ages register.

Individuals of any age are now subject to data inclusion on the AIR. Previously, only children under seven (those in the ACIR) had their vaccination records centrally recorded. After the amendments, any person who receives a vaccination in Australia from a recognised vaccination provider will have that record uploaded to the AIR. This includes adults receiving influenza, COVID-19, shingles, pneumococcal, or other vaccines. The expansion means that vaccination history for the entire population will potentially be in one register, not just children.

Vaccination providers (medical practitioners, nurses, pharmacists, aboriginal health workers) are affected because their legal obligation to upload vaccination encounter data now extends to all patients, not just children. While the principal AIR Act (s 9) requires providers to upload information, the consequential amendments do not change that duty. However, the definitional changes ensure that providers must now record data for adults using the same systems and processes previously limited to children. This may increase compliance burden, particularly for providers who rarely vaccinate children and were not previously required to connect to the ACIR.

Legal personal representatives gain new rights under the Act. Schedule 2 item 3 defines them broadly. Parents and guardians of minors already had similar rights under the old regime. But now, a trustee for a person under legal disability or an enduring power of attorney holder for someone who is incapable of managing health affairs can act on that person’s behalf regarding the register. This is significant for aged care, disability, and mental health contexts where someone other than a family member may need to access or restrict vaccination data.

Government agencies are directly affected. The Department of Human Services (now Services Australia) operates the register through Medicare. The amendments to the Human Services (Medicare) Act 1973 and the Human Services (Centrelink) Act 1997 (Schedule 1 items 10 and 11) add the AIR Act to the list of “designated program Acts”. This allows information sharing for program administration purposes. The Freedom of Information Act 1982 is amended (Schedule 1 item 3) to add section 23 of the AIR Act to Schedule 3, which exempts certain documents from FOI - likely those containing protected information from the register.

Recipients of family assistance payments (Family Tax Benefit Part A supplement, Child Care Subsidy) are indirectly affected because immunisation requirements for children continue to be linked to the register. However, the definitional changes in Schedule 1 item 1 to the Family Assistance Act ensure that the “recognised immunisation provider” now refers to the AIR Act’s definition, so the payment system uses the correct reference.

Coroners are affected by Schedule 3 item 2, which repeals paragraph 22(2)(g) of the AIR Act that had allowed disclosure of protected information to a coroner. After 1 January 2017, coroners can no longer receive information from the register under that provision. They would need to rely on other lawful bases or court orders.

Prescribed bodies under the National Health Act 1953 (which deal with vaccine supply and distribution) are affected by Schedule 1 item 12, which ensures that references to “prescribed body” point to the AIR Act meaning rather than the old ACIR provisions.

Duty of vaccination providers to upload information. The principal AIR Act section 9 requires a recognised vaccination provider who vaccinates an individual to upload the relevant vaccination information to the AI register within 10 days (or as prescribed). The consequential amendments (Schedule 2 items 12-14) change the language from “young individual” to “individual”, so the duty now applies to all ages. This is a legal obligation, though enforcement is typically tied to payment systems (providers are in practice incentivised by Medicare benefit rules).

Duty to protect information. Section 22 of the AIR Act (as amended by Schedule 2 items 29-32) imposes obligations regarding use and disclosure of protected information from the AI register. A person who obtains protected information must not use or disclose it except for the purposes of the register, with consent, or as otherwise authorised by law. Unauthorised use or disclosure is an offence (section 22(3) of the principal Act, not in this Act but referred to). The consequential amendment also removes the ability to disclose to coroners (Schedule 3 item 2).

Right of individuals to opt out from receiving information. Section 11(1) of the AIR Act (as amended by Schedule 2 item 21) allows an individual to request (in the approved form) that the Secretary not provide the individual with information to which the individual is entitled under section 10(1)(h) or (i). This essentially means an individual can say “do not send me vaccination reminders or information.” The note clarifies that the request could be made by a legal personal representative for an individual incapable of managing health affairs.

Right to request non-disclosure for certain purposes. Section 11(2) (as substituted by Schedule 2 item 22) allows an individual to request that personal information on the AI register relating to or identifying that individual (or another individual they legally represent) not be disclosed for one or more purposes of the register. This is a more significant right: it limits the use of the data for its stated purposes. However, it does not allow complete removal from the register - the data remains but is shielded from certain disclosures.

Rights of legal personal representatives. Schedule 2 item 20 amends subsection 10(2) to provide that for an individual incapable of managing health affairs, the purposes of the register include checking vaccination status by the legal personal representative, and advising or giving certificates to that representative. This ensures that a representative can step into the individual’s shoes for register interactions.

Right to have data accurate. While not explicitly amended by this Act, the AIR Act contains obligations to correct information. The consequential amendments do not alter that.

This Act itself does not create penalties. The penalties for non-compliance exist in the principal Australian Immunisation Register Act 2015 and other statutes. However, the consequential amendments affect the enforcement landscape indirectly.

Unauthorised use or disclosure of protected information. Section 22 of the principal Act makes unauthorised use or disclosure of protected information from the AI register an offence. The maximum penalty is 2 years imprisonment (per section 22(3) of the principal Act, which is not in this Act but is the operative provision). This Act reinforces that regime by ensuring that the definition of “AI register” applies and that the coroner is removed as a permissible disclosee (Schedule 3 item 2). Any person who was previously relying on the coroner exception after 1 January 2017 would face potential prosecution.

False or misleading information. While the AIR Act does not have a specific offence for false vaccination records, the Criminal Code Act 1995 (s 137.1) applies to providing false or misleading information to a Commonwealth entity. Filing false vaccination data would attract criminal penalties under that Code.

Family assistance payment implications. The Family Assistance Act uses the register data to determine whether a child meets immunisation requirements for Family Tax Benefit Part A supplement and Child Care Subsidy. If vaccination records are missing, incorrect, or incomplete, payments may be reduced or denied. This is an economic enforcement mechanism separate from criminal penalties. The consequential amendments ensure the correct register reference is used.

Compliance burden on providers. Vaccination providers who fail to upload data to the register may face administrative consequences under the Medicare program, such as refusal to process certain claims or follow-up requests from Services Australia. This Act does not change those mechanisms but extends them to adult vaccinations.

Data protection enforcement. The Office of the Australian Information Commissioner could investigate breaches of the Privacy Act 1988 in relation to the register. However, the AIR Act’s specific protections (section 22) may override or supplement the Privacy Act. Unauthorised access or misuse by an employee of a vaccination provider could lead to criminal charges under the AIR Act.

No private right of action. The Act does not create a private right to sue for damages if vaccination data is mishandled. Enforcement is through criminal prosecution and administrative sanctions.

A New Tax System (Family Assistance) Act 1999. Schedule 1 item 1 replaces the definition of “recognised immunisation provider” in that Act with a cross-reference to the AIR Act’s definition of “recognised vaccination provider.” This ensures that the immunisation requirements for family assistance payments are linked to the register maintained under the AIR Act, not the old ACIR provisions. The practical effect is that vaccination providers who were previously recognised for childhood immunisation are automatically recognised for adult immunisation for payment purposes.

Health Insurance Act 1973. Schedule 1 items 5-9 repeal Part IVA (which had established the ACIR) and subsections 130(3B)-(3G) that had restricted disclosure of personal information relating to immunisation. Instead, new subsection 130(5G) allows providing information for inclusion in the register kept under Part 2 of the AIR Act. This removes potential inconsistencies between the Medicare secrecy provisions and the new register’s operation. Items 8 and 9 remove references to “section 46E” which had dealt with ACIR information.

Healthcare Identifiers Act 2010. Schedule 1 item 4 and Schedule 2 items 34-35 update the definition of “Australian Childhood Immunisation Register” to mean the register kept under Part 2 of the AIR Act. The old ACIR is functionally superseded. Subparagraph 22D(2)(a)(ii) of the Healthcare Identifiers Act is amended to refer to the “Australian Immunisation Register kept under Part 2 of the Australian Immunisation Register Act 2015.” This ensures healthcare identifier numbers can be used with the new register.

Human Services (Centrelink) Act 1997 and Human Services (Medicare) Act 1973. Schedule 1 items 10 and 11 add the AIR Act as a “designated program Act” in both Acts. This allows the Secretary (or authorised officers) to share information collected under those Acts with the operator of the register, and vice versa, for program administration. It facilitates data matching and ensures that vaccination records can be linked to Medicare and Centrelink records.

National Health Act 1953. Schedule 1 item 12 amends subparagraph 9BA(6)(a)(iii) so that “prescribed body” under the AIR Act is used in that section, which deals with vaccine supply. Schedule 1 item 13 adds an exception to subsection 135A(5C) allowing a person to provide information for inclusion in the register. Schedule 3 items 4-6 repeal section 9BA (which had become redundant) and adjust exceptions in section 135A.

Freedom of Information Act 1982. Schedule 1 item 3 adds section 23 of the AIR Act to Schedule 3 of the FOI Act. Documents containing information that would disclose information in the register that is exempt under section 23 of the AIR Act are exempt from FOI access. This protects the confidentiality of the register.

Child Support (Registration and Collection) Act 1988. Schedule 1 item 2 adds the AIR Act to the definition of “designated program Act” in subsection 16AB(3), allowing information sharing between the child support system and the register.

State and territory vaccination laws. The Act does not directly interact with state laws, but by establishing a national all-ages register, it centralises data that was previously only collected for children. States may use the register for school vaccination programs (the register can have separate parts for school programs). The introduction of the “Australian School Vaccination Register” as a part of the AIR (per Schedule 3 item 1) suggests state health departments could use the register to record school-based vaccinations without needing their own databases.

The Australian Immunisation Register (Consequential and Transitional Provisions) Act 2015 is itself an amendment Act. It was introduced as part of a package to create a national all-ages immunisation register, replacing the childhood-only ACIR which had been operating under the Health Insurance Act 1973 since 1996. The Act received Royal Assent on 12 November 2015.

The amendments were staged across three years. Sections 1-3 (short title, commencement, schedules) commenced on Royal Assent (12 November 2015). Schedule 1 (major consequential amendments to other Acts) commenced on 1 January 2016, the same day as the principal Australian Immunisation Register Act 2015. Schedule 2 (amendments to the principal Act to broaden from children to all ages) commenced on the earlier of a day fixed by Proclamation or 12 months after Royal Assent. It was proclaimed to commence on 30 September 2016 (see F2016N00018). Schedule 3 (further amendments enabling separate parts and removing coroner disclosure) commenced on 1 January 2017.

The Act repealed or amended provisions in nine Acts. The most significant changes were: repeal of Part IVA of the Health Insurance Act 1973 (the old ACIR legal framework); removal of “young individual” and “ACI register” references throughout the principal Act; introduction of the legal personal representative definition; and the opt-out and non-disclosure mechanisms.

No subsequent legislation appears to have materially amended this Act; it has largely been exhausted once its schedules took effect. The Act remains on the statute book as a historical record of the transition.

The Act itself has not been the subject of any reported litigation. No cases citing this specific Act were mentioned in the source material, nor are they widely known. The transition from ACIR to AIR occurred without significant legal challenge. However, broader litigation concerning the use of immunisation registers and mandatory vaccination policies has occurred in Australia, particularly in relation to “no jab, no pay” and “no jab, no play” laws. These cases typically challenge the validity of conditions on family assistance payments or school enrolment, and they may involve the AIR, but they do not turn on the interpretation of this consequential Act.

Potential areas of future litigation could include disputes over the scope of legal personal representative rights (e.g., a dispute between a parent and a grandparent who holds an enduring power of attorney), or challenges to the non-disclosure provisions (e.g., an individual claiming the opt-out mechanism is ineffective or that their information was disclosed contrary to section 11). Privacy challenges could arise if data from the AI register is used for purposes beyond those stated in section 10.

Given the technical nature of the Act, litigation is unlikely unless a specific dispute arises about the transitional provisions - for example, whether information collected under the old ACIR regime was properly transferred to the AIR, or whether individuals had a right to request deletion of data that had been collected when they were children.

Staggered commencement dates are critical. The Act has three commencement dates: 1 January 2016 for Schedule 1, 30 September 2016 for Schedule 2 (by proclamation, not automatic), and 1 January 2017 for Schedule 3. If you relied on the Act immediately after Royal Assent (12 November 2015), you would find that none of the substantive amendments were in force. The ACIR continued to operate under old provisions until Schedule 1 commenced. A practitioner must check the exact commencement of each Schedule to know which version of the law applied on a given date.

The coroner disclosure was removed. Schedule 3 item 2 repeals paragraph 22(2)(g) of the AIR Act, which had allowed disclosure of protected information to a coroner. After 1 January 2017, coroners cannot access the register under that provision. This creates a gap for coroners investigating vaccine-related deaths or adverse events. If a coroner needs vaccination records, they would need to seek a court order, rely on state laws that obtain the information directly from providers, or use other lawful bases. This removal may increase administrative friction for death investigations. The source Act itself provides no replacement mechanism.

The opt-out and non-disclosure requests have limits. Section 11(2) allows an individual to request that personal information not be disclosed for “one or more purposes of the AI register.” It does not allow the individual to prevent the collection of the information in the first place. The data remains on the register; only disclosure for specified purposes is blocked. Also, the request must be in the “approved form.” If the form is not available or impractical, the individual’s right may be effectively constrained.

Legal personal representative definition catches enduring attorneys but not informal carers. A person who holds an enduring power of attorney is included; a person who is simply a carer without formal legal authority is not. This could cause issues for aged care residents who have not appointed an enduring attorney but have a family member managing their affairs. That family member would not qualify as a legal personal representative unless they are also a parent (for under 18) or a trustee.

The “Australian School Vaccination Register” example is not exhaustive. Schedule 3 item 1 note says “for example, the parts of the register dealing with vaccinations given through school programs could be kept separately and be called the Australian School Vaccination Register.” This implies other parts could be created without legislation, by administrative decision. The Government could potentially create a separate part for a controversial vaccine program (e.g., for COVID-19) and name it something that implies a distinct register, even though legally it is part of the AIR. Users of the register should be aware that a “separate name” does not mean separate legal basis.

No grandfathering for old ACIR data. The Act does not contain provisions allowing individuals to opt out of having their childhood data transferred to the AIR. If a person had vaccination records in the old ACIR, those records were simply migrated to the AIR. An adult who objects to being on the register cannot have childhood data removed; they can only request non-disclosure going forward.

For vaccination providers. Comply by ensuring your practice management software and workflow are aligned to the AIR, not the old ACIR. Upload vaccination data for every patient you vaccinate, regardless of age. The legal obligation under section 9 of the AIR Act applies to all vaccinations. Use the Healthcare Identifiers Service to correctly match records. If you vaccinate a person who is incapable of managing their health affairs, take note of any legal personal representative who may have the right to receive information or make requests. Do not rely on the coroner exception for disclosures (after 1 Jan 2017). Ensure your staff understand that protected information from the register cannot be used or disclosed except as authorised by section 22.

For individuals. If you do not wish to receive vaccination reminders or information from the register, submit an opt-out request under section 11(1) in the approved form. If you do not want your vaccination data disclosed for certain purposes (e.g., for research), submit a non-disclosure request under section 11(2). These forms are available from Services Australia. You can also ask the register to correct any inaccurate information. If you are a legal personal representative for someone who is incapable, you can act on their behalf - carry documentation proving your authority (enduring power of attorney, guardianship order, etc.) when dealing with the register.

For government agencies. When handling data from the AI register, ensure you have lawful authority under the designated program Act provisions. Do not use the data for secondary purposes not listed in section 10. If you are an officer of Centrelink or Medicare, the information sharing permitted by the amendments (Schedule 1 items 10 and 11) is limited to administering the designated programs. Do not assume you have blanket access to all register data.

For legal personal representatives. If you hold an enduring power of attorney for an adult who is incapable of managing health affairs, you have the same rights as the individual regarding the register (checking status, receiving advice and certificates, making opt-out and non-disclosure requests). You should register your authority with Services Australia to ensure your requests are processed. Note that for a minor, the parent or guardian is automatically the legal personal representative - no extra step is needed.

For lawyers and compliance professionals. When advising clients on immunisation-related payment disputes, check whether the definitions used are the current ones (post-2016/2017). The Family Assistance Act now cross-references the AIR Act. If a coroner needs vaccination records, advise that the direct access route is closed; the coroner must use other legal processes. If a client is concerned about data privacy, the avenue is section 11 non-disclosure, not deletion. Ensure any application to the register uses the correct “approved form”.