Health Insurance (Quality Assurance Activity – Australasian Registry of Electrocardiograms in National Athletes (ARENA)) Declaration 2025

This instrument, titled the Health Insurance (Quality Assurance Activity - Australasian Registry of Electrocardiograms in National Athletes (ARENA)) Declaration 2025, declares a specified registry activity to be a "quality assurance activity" under Part VC of the Health Insurance Act 1973 (see s 5). The declaration applies, to the extent the activity relates to health services provided in Australia, to the Australasian Registry of Electrocardiograms in National Athletes (ARENA). The text identifies the University of Sydney as the entity conducting the activity and records that the University has contracted the South Australian Health and Medical Research Institute (SAHMRI) Registry Centre to host ARENA and provide ongoing advice with registry operations and governance (Schedule, item 2). The declaration collects and stores athlete screening data, including electrocardiograms (ECGs) and other cardiac tests, from participating elite sporting organisations in Australasia and makes de-identified datasets available for analysis, recommendations and research; results are to be published (Schedule, item 2).

Mechanically, the instrument: names the activity (s 1 / Schedule item 1); sets commencement as "the day after this instrument is registered" for the whole instrument (s 2, commencement table); records the statutory authority for the instrument (s 3, made under subsection 124X(1) of the Health Insurance Act 1973); and provides that the instrument is repealed when it ceases to be in force in accordance with subsection 124X(4) of that Act (s 4). The Schedule provides the substantive description of the quality assurance activity and its operational arrangements, including funding (NHMRC grants), participation eligibility ("All elite sporting organisations in Australia conducting cardiac screening of athletes are eligible to participate and provide data"), data hosting and de-identification for publication (Schedule, item 2). The declaration also specifies dissemination channels: journal publications, annual reports on the ARENA website, and presentations at annual conferences (Schedule, item 2).

The instrument does not itself contain procedural rules, penalties, data-access protocols, detailed governance or consent mechanisms. It asserts that the activity is a quality assurance activity to which Part VC applies (s 5), but the instrument does not set out the legal consequences, enforcement measures or evidentiary effects that attachment to Part VC may carry; those consequences, if any, are in the Health Insurance Act 1973 outside the text of this instrument.

The instrument rests on a few discrete concepts, each defined or illustrated by the Schedule language.

• Quality assurance activity declaration: The instrument declares a particular activity , ARENA , to be a "quality assurance activity" for the purposes of Part VC of the Health Insurance Act 1973 (s 5). The declaration is the central legal act of the instrument.

• Registry of athlete screening data: The activity is explicitly a registry that collects athlete screening data including ECGs and "other cardiac tests" collected in Australasia (Schedule, item 2). The term "registry" implies a database of individual-level screening data, although the instrument limits its outward disclosure to de-identified and aggregated datasets.

• Scope and geographical application: The declaration applies "to the extent that the quality assurance activity relates to health services provided in Australia" (s 5). The registry collects data in Australasia, but the statutory declaration is framed as applying insofar as the activity concerns Australian health services (Schedule, item 2).

• Organisational roles and hosting: The University of Sydney is identified as the body conducting the activity; SAHMRI Registry Centre is contracted by the University to host ARENA and advise on operations and governance (Schedule, item 2). This allocates operational responsibility to the University and hosting and advice responsibilities to SAHMRI.

• Funding source: ARENA is funded by National Health and Medical Research Council grants (Schedule, item 2). The funding note identifies an external public research grant as the financial resource supporting the activity.

• Data handling and disclosure: Data is entered into a database, "securely stored at SAHMRI," and "de-identified datasets are developed for use for analysis, recommendations, and research purposes, with the results to be published." Disclosure of information is described as using "de-identified and aggregated data" for journal publications, annual reports on the ARENA website and conference presentations (Schedule, item 2).

• Participation eligibility and provenance: "All elite sporting organisations in Australia conducting cardiac screening of athletes are eligible to participate and provide data" (Schedule, item 2). The instrument records collaborative development with sporting bodies, team physicians and players association representatives.

Directly named actors in the instrument are the University of Sydney, SAHMRI Registry Centre, participating elite sporting organisations in Australia, and the National Health and Medical Research Council (as funder). The declaration also references "national level data" and populations targeted for improved screening (female athletes and Indigenous populations), which indicates indirect beneficiaries and populations of interest.

• University of Sydney: Identified as the conducting entity (Schedule, item 2). The University is the legal and operational controller named in the instrument; it will be responsible for contracting SAHMRI and implementing the registry according to the Schedule description.

• SAHMRI Registry Centre: Contracted to host ARENA, to provide storage and "ongoing advice with registry operations and governance" (Schedule, item 2). Hosting duties explicitly include secure storage of the database.

• Elite sporting organisations in Australia: The instrument states that "All elite sporting organisations in Australia conducting cardiac screening of athletes are eligible to participate and provide data." Eligibility is explicit; the instrument does not impose a statutory obligation to participate, nor does it describe incentives or payments for participation other than the general statement that NHMRC grants fund ARENA (Schedule, item 2).

• Athletes and specific populations: The registry collects athlete screening data. The Schedule states the analysis will be used to improve screening policies, particularly for underrepresented athlete groups such as female athletes and Indigenous populations. Those groups are therefore the target of intended policy effects, though the instrument imposes no new duties on them and does not describe consent or opt-out mechanisms.

• Researchers, clinicians and guideline bodies: While not named as legal actors, these groups are implied users of de-identified outputs: analysis, recommendations, research publications, annual reports and conference presentations are the declared dissemination channels (Schedule, item 2). The instrument indicates that the registry's outputs "will be used to inform improvements to screening policies and guidelines," which identifies guideline-makers and policy designers as downstream actors affected by the registry's findings.

• NHMRC: Identified as funder (Schedule, item 2). Where funding is public, grant conditions may impose reporting and use restrictions; the instrument does not list those conditions.

The instrument itself primarily sets out responsibilities and arrangements rather than statutory duties or enforceable rights. It assigns operational responsibilities and describes how data are to be handled, but it stops short of prescribing compliance mechanisms, consent rules or legal entitlements.

Stated responsibilities and operational duties in the instrument:

• University of Sydney: Conducts the activity (Schedule, item 2). The University, by accepting that conduct role, will carry operational responsibility for establishing and running the registry as described. The instrument does not list specific statutory obligations on the University beyond the declaration itself.

• SAHMRI Registry Centre: Contracted to host ARENA, provide secure storage of the database and to provide ongoing advice with registry operations and governance (Schedule, item 2). The text explicitly links secure storage to SAHMRI hosting.

• Participating elite sporting organisations: Eligible to participate and to "provide data" (Schedule, item 2). The instrument establishes an entitlement to participate; it does not state that organisations must participate, nor does it describe any legal duty to supply data, any format requirement beyond entering data into the registry database, or any penalty for non-participation.

• Data handling: The instrument requires that disclosed information "will use de-identified and aggregated data" and that de-identified datasets are developed for analysis and research purposes (Schedule, item 2). Thus the disclosure regime specified is limited to de-identified and aggregated material. That statement functions as a declared data-disclosure constraint within the instrument.

• Publication and dissemination: The instrument identifies specific dissemination channels , journal publications, annual reports on the ARENA website, and presentations at annual conferences , and links disclosure to producing recommendations in practice (Schedule, item 2). These are rights/expectations for the University and SAHMRI to publish and disseminate outputs derived from the registry.

What the instrument does not specify, and therefore leaves open or to other frameworks:

• Consent and participant rights: There is no text in the instrument setting out consent procedures for athletes whose data are entered, rights to access or correct data, or opt-out or withdrawal processes. The instrument states data will be de-identified for disclosure, but does not specify the de-identification standard or whether personal identifiers will be held separately.

The instrument contains no express penalties, sanctions, or enforcement mechanisms. It declares the registry activity to be a quality assurance activity under Part VC of the Health Insurance Act 1973 (s 5), and it identifies the University of Sydney and SAHMRI as conducting and hosting the registry respectively (Schedule, item 2), but it does not include provisions imposing fines, offences, criminal or civil penalties, inspection powers, or compliance notices within the instrument.

Two points follow from the text:

• No internal enforcement provisions: There are no schedules, clauses or sections in this instrument that set out rules for enforcing obligations, auditing compliance, imposing fines, or requiring corrective action. Any enforcement or penalties associated with the declaration would therefore need to be found in the Health Insurance Act 1973 (Part VC) itself or in other applicable law, rather than in this declaration.

• Repeal mechanism references external provision: The text states the instrument "is repealed when it ceases to be in force in accordance with subsection 124X(4) of the Health Insurance Act 1973" (s 4). That references the parent Act for the conditions under which the instrument ceases to be in force. The instrument does not itself set conditions for ceasing to be in force.

For a compliance officer, lawyer or participant, the practical implication from the instrument is that you cannot identify specific penalties or enforcement routes from this declaration text alone. To determine sanctions or enforcement options that apply to conduct relating to ARENA, one must consult the Health Insurance Act 1973 (Part VC and relevant subsections cited in this instrument, including ss 124X(1) and 124X(4)) and any ancillary rules or grant conditions (for example, NHMRC grant agreements), none of which are reproduced here. The instrument gives no timetable, no audit schedule and no inspection authority within its own text.

The instrument is constructed as a statutory declaration made under a specific provision of the Health Insurance Act 1973 and therefore interacts, in legal effect, with that Act. The instrument names the enabling provision: subsection 124X(1) of the Health Insurance Act 1973 (s 3), and it specifically declares that the described activity is a quality assurance activity "to which Part VC of the Health Insurance Act 1973 applies" (s 5). The instrument also references subsection 124X(4) of the Health Insurance Act 1973 as the provision governing repeal in s 4.

Beyond those explicit references, the instrument does not set out how it interacts with other statutory regimes, such as privacy legislation, research ethics law, public records laws, or grant conditions. The Schedule does state that data are "de-identified" and "securely stored at SAHMRI" and that outputs will be published and presented, but it does not specify the privacy framework or legal exemptions relied upon for collection, storage, use or disclosure. Therefore:

• Primary statutory interaction: The instrument’s immediate statutory hook is the Health Insurance Act 1973. Any legal effects flowing from the status of being a Part VC quality assurance activity are to be located in that Act; they are not stated in the declaration.

• Privacy and data-protection laws: The instrument does not cite or carve out compliance with the Privacy Act 1988, state/territory privacy laws, or research ethics frameworks. The text’s reference to de-identification and secure storage suggests an intent to limit identifiability in disclosures. However, the instrument does not specify legal authority for collection, the standard of de-identification used, nor whether any exemption from privacy obligations is claimed under other statutes.

• Grant and contractual terms: ARENA is funded by NHMRC grants and SAHMRI is contracted by the University of Sydney to host and advise. The instrument does not reproduce NHMRC grant conditions, which may impose reporting, confidentiality, intellectual property, accessibility or publication obligations, nor does it set out the terms of the University-SAHMRI contract. Those contractual and grant instruments will shape operational obligations, data-sharing controls, and compliance responsibilities in ways not specified here.

• Research governance and ethics: The instrument records that ARENA "was developed in collaboration with sporting bodies, team physicians, and players association representatives" and that outputs will be used for research and to inform policy. It does not state whether human research ethics approvals, participant consent, or institutional governance approvals are required or already in place. Interaction with research governance regimes therefore remains an open question to be answered by governance documents and grant conditions external to this declaration.

The instrument contains a commencement table and an explicit note about the table’s scope, but it contains no recorded amendments beyond its original making. The commencement provisions state that "the whole of this instrument" commences "the day after this instrument is registered" (s 2, commencement table, Column 2). There is a formal note that the commencement table "relates only to the provisions of this instrument as originally made" and "will not be amended to deal with any later amendments of this instrument" (s 2, note). This is a standard-format proviso indicating the instrument’s historical consolidation approach for the published commencement table rather than substantive law.

The instrument also records its statutory authority (s 3) and directs that it "is repealed when it ceases to be in force in accordance with subsection 124X(4) of the Health Insurance Act 1973" (s 4). That means the instrument anticipates a repeal mechanism located in the parent Act; the Schedule itself does not specify a term or sunset date for the declaration.

There are no listed amending instruments, no schedules of prior versions, and no variant texts within the instrument. The Schedule is presented as the definitional material for the declared activity. The instrument therefore presents as a single-declaration instrument without embedded amendment history.

For practical purposes:

• If the declared activity is to be modified (for example, to change host, scope, data handling rules or participants), the instrument itself does not provide amendment clauses; any change would require further administrative action under the Health Insurance Act 1973 , the same statutory route used to make this declaration (s 3). The instrument does not state the procedure for variation or replacement.

• The instrument’s note that the commencement table will not be amended in published versions means that any later amendments will be reflected in separate amendment instruments rather than by editing the original commencement table.

• Because the instrument ties repeal to subsection 124X(4) of the parent Act (s 4), the duration and conditions for cessation will be governed by that external provision rather than a clause within this declaration.

In sum, the instrument’s own amendment history is empty beyond its original making and commencement; any change will be effected by further instruments made under the Health Insurance Act 1973.

The instrument contains no litigation history, references to legal proceedings, or annotations relating to court cases. There are no named judicial or administrative decisions recorded in the text, and no mention of disputes, challenges, or prior litigation associated with the ARENA registry in the Schedule or clauses.

Consequences of that absence:

• No reported challenges in the instrument: The declaration does not indicate that it arose from litigation, nor does it record any contested issues or settled disputes. The instrument is, on its face, an administrative declaration made under subsection 124X(1) of the Health Insurance Act 1973 (s 3).

• Litigation-driven content not visible: Because this instrument is a short declaration, it is normal that it contains no litigation history. If litigation were to arise later , for example, over data access, privacy, consent, or the legal consequences of Part VC designation , that litigation would be external to this instrument and would need to be located in court records or legal reporting, not in the declaration text.

• No precedent names: The instrument does not name any cases or other declaratory rulings. Therefore, practitioners seeking to understand legal risks or precedent connected to ARENA must look to other sources, including the Health Insurance Act 1973 and any case law interpreting Part VC or related provisions, none of which are reproduced here.

For compliance officers and legal counsel, the absence of litigation history in the instrument is informative only in the narrow sense that the instrument itself does not record prior legal challenges; it does not speak to the broader litigation risk that may exist under privacy, research ethics, or other regimes that govern registries of health-related data.

The instrument is concise and deliberately limited in scope. That economy produces several specific attention points,items the instrument states or omits that have practical consequences for operators, participants and advisers.

• Declaration without procedural detail: The instrument declares ARENA to be a quality assurance activity (s 5) but does not include procedural rules on consent, data access, or retention. The Schedule describes de-identification and secure storage but does not prescribe technical standards or governance processes. Practitioners should not infer procedural protections from the declaration alone.

• Eligibility versus compulsion: The Schedule states that "All elite sporting organisations in Australia conducting cardiac screening of athletes are eligible to participate and provide data." The term "eligible" implies invitation or entitlement to opt into the registry; it does not create a legal obligation to participate, nor does it specify funding or compensation for participant organisations. The instrument does not define "elite sporting organisations" or set criteria for that designation.

• Data scope and geographic framing: The registry collects data "in Australasia" but the declaration applies "to the extent that the quality assurance activity relates to health services provided in Australia" (s 5; Schedule, item 2). This creates a potential jurisdictional interface: data from New Zealand or other Australasia jurisdictions may be collected by the registry, but the statutory declaration’s scope is limited to Australian health-service-related data. The instrument does not explain how data originating outside Australia will be handled from a legal standpoint.

• De-identification stated, standards absent: The Schedule commits to producing "de-identified datasets" and to disclosing "de-identified and aggregated data." However, the instrument does not define the de-identification methodology, risk thresholds for re-identification, or whether identifiers will be retained for linkage purposes under separate governance. That gap matters for privacy compliance and for data-subject rights.

• Hosting and security responsibility: The Schedule states that data is "securely stored at SAHMRI" and that SAHMRI provides ongoing advice on governance. The instrument does not allocate legal liability for data breaches, nor does it set security baselines or audit rights. Contracts between the University of Sydney and SAHMRI (not reproduced here) will be the operational vehicle for those responsibilities.

Compliance, as far as this instrument sets it out, requires aligning operational practices with the elements the declaration does specify and ensuring that external instruments (grant agreements, contracts, privacy and research governance rules) are addressed. The instrument defines the basic structure: a University-run registry hosted at SAHMRI, funded by NHMRC, collecting athlete ECG and cardiac test data entered into a database, securely stored at SAHMRI, and disclosed in de-identified and aggregated form for publication and reporting (Schedule, item 2). Practical compliance steps, grounded in the instrument’s text, are as follows.

• Affirm institutional roles: The University of Sydney should document its role as the conducting entity and ensure formal contract(s) with SAHMRI Registry Centre expressly reflect the hosting and "ongoing advice with registry operations and governance" duties identified in the Schedule (Schedule, item 2). That contract should allocate operational responsibilities that the instrument omits, including security standards, incident response, data retention and access controls.

• Validate funding conditions: Review NHMRC grant agreements that fund ARENA, since the instrument identifies NHMRC grants as the funding source (Schedule, item 2). Grant conditions often impose reporting, data management plan, publication and intellectual property obligations. The grant terms will materially affect permissible uses and obligations.

• Operationalise secure storage and de-identification: The instrument requires data to be "securely stored at SAHMRI" and disclosed as "de-identified and aggregated data" (Schedule, item 2). The University and SAHMRI should record the specific technical, organisational and legal standards that will be used to achieve secure storage and de-identification, including whether direct identifiers are held separately for linkage, how re-identification risk is assessed and what statistical or technical measures will be applied.

• Establish participation agreements: Although the declaration states participating organisations are "eligible to participate and provide data" (Schedule, item 2), it does not mandate participation or specify formats. The University should use written participation agreements or data-transfer agreements with each participating elite sporting organisation to document: scope of data supplied; the legal basis for transfer; obligations on the supplier organisation (including consent practices used by clinicians); data format and metadata; security requirements in transit; permitted uses; and withdrawal processes.