The Regulation organises around a small number of recurring legal mechanisms and concepts. Understanding those is essential for mapping rights, duties and administrative procedures in the national scheme.

1. Modified application of Commonwealth Acts. The core technique is to make the AIC Act, FOI Act, Ombudsman Act and Privacy Act "apply as if" certain substitutions, exclusions and modifications are in place (Parts 3-6). Each Part opens with a statement that it "sets out modifications" for the purposes of specified sections of the Law (eg s 6 for the AIC Act, s 13 for the FOI Act, s 24 for the Ombudsman Act, s 33 for the Privacy Act). The "as if" formulation makes the Commonwealth Acts operative, but only in the terms specified.

2. Substitution of institutional reference points. The Regulation replaces Commonwealth officeholders and bodies with scheme‑specific counterparts. Examples: references to the Freedom of Information Commissioner, the Privacy Commissioner, the Information Commissioner and the Ombudsman are replaced by the National Health Practitioner Privacy Commissioner and the National Health Practitioner Ombudsman respectively (see s 7(a), s 14(a), s 25(c), s 34(a)). References to Ministers, Governor‑General, Commonwealth, Parliament and courts are similarly re‑directed to the Ministerial Council, participating jurisdictions, relevant Parliaments or relevant tribunals as appropriate (eg ss 7(b)-(c), 14(b)-(e), 25(a)-(b), 34(b)-(f)).

3. Narrowed scope of application. The Commonwealth Acts are limited so they apply "only in relation to" particular scheme entities (eg s 15 for the FOI Act, s 26 for the Ombudsman Act, s 35 for the Privacy Act). The lists of entities include the National Agency, Agency Board, National Boards, accreditation authorities and specified persons appointed by National Boards to conduct examinations or assessments. The definitions of "agency service provider" (s 23) and "contracted service provider" (s 32) extend coverage to subcontractors who supply services under head contracts to the National Agency.

4. Governance and reporting obligations. The Regulation imposes specific financial governance duties on the National Health Practitioner Privacy Commissioner and the National Health Practitioner Ombudsman: ensure efficient, effective and economical operations; keep proper books and records; ensure expenditure is lawful and provides reasonable value; implement internal control procedures; prepare audited financial statements in accordance with Australian Accounting Standards; and submit annual reports to the Ministerial Council within three months (ss 9-10, 28-29, 36). Those annual reports must include audited financial statements audited by a State or Territory Auditor‑General or an auditor engaged by an Auditor‑General (ss 10(b)(ii), 29(b)(i)(B)).

5. Delegation, staffing and procurement flexibility. The Regulation explicitly permits the scheme officeholders to appoint and employ staff "in a way the Commissioner/Ombudsman considers appropriate", engage contractors or consultants, enter into arrangements with other entities for provision of staff or resources, and delegate functions or powers (see s 8(d)(i)-(iv) and s 27(f)(i)-(iv)). This creates operational flexibility divergent from ordinary Commonwealth appointment and staffing rules which are disapplied (see s 8(a)).

6. Exclusion of particular provisions and subordinate rules. The text disapplies a range of Commonwealth Act provisions or associated instruments. Examples include exclusions for provisions about establishment of the AIC Office, review of operations, Information Advisory Committee, guidance functions, regulation‑making provisions and certain other functions (eg s 11(1)(c)(i)-(ix), s 30(a)-(b), s 38(c)(i)-(vii)). Similarly, the Regulations under each Commonwealth Act are generally stated not to apply in the scheme context (ss 12, 20, 31, 39), aside from specifically preserved items such as FOI fees and charges (s 20) and witness expenses under the Ombudsman Act (s 31, which disapplies them).

7. Transitional continuity. The Regulation contains transitional clauses that continue existing appointments and decisions of National Boards and the scheme’s privacy and ombudsman officeholders, and directs unfinished FOI processes to be determined under the newly applied FOI Act (ss 44-49).

8. Profession‑specific technical rules. The text prescribes profession‑specific transitional or qualification rules: the transition period for midwives’ professional indemnity insurance arrangements ends 31 December 2026 (s 40); a participation day for registration in paramedicine is 1 December 2018 (s 41); and the Diploma of Emergency Health Care is prescribed for general registration in paramedicine (s 41A).

Those concepts structure how existing Commonwealth information and oversight regimes integrate with the national health practitioner regulatory architecture. They determine who the principal decision‑makers and accountable officers are (the Ministerial Council, the scheme officeholders and boards), which procedural safeguards remain in place and which are expressly removed, and how financial and reporting duties are allocated within the national scheme.

The Regulation defines and directly affects a defined universe of scheme participants. Below is a focused map of the affected parties, the clauses that place duties or change relationships, and the practical reach of the Regulation.

1. National Agency and Agency Board. The FOI, Privacy and Ombudsman Parts are modified so those Acts apply in relation to the National Agency and Agency Board (see ss 15(b)(ii)-(iii), 26(b)(ii)-(iii), 35(b)(ii)-(iii)). The National Agency is responsible for meeting the modified FOI and Privacy publication and reporting obligations (for example the requirement to publish information by 1 June 2019, s 15(d), and to provide information for the Privacy Commissioner’s annual report, s 16(b)).

2. National Health Practitioner Privacy Commissioner. The Regulation adapts the AIC Act and Privacy Act so the National Health Practitioner Privacy Commissioner holds the relevant functions for the scheme (ss 7(a), 34(a)). The Commissioner is a regulated officeholder: the appointment, remuneration and terms are to be decided by the Ministerial Council rather than under standard Commonwealth appointment processes (s 8(b)). The Commissioner must comply with scheme‑specific financial control, reporting and disclosure rules (eg s 9 financial duties; s 10 annual report; s 11 disclosure of material personal interest).

3. National Health Practitioner Ombudsman. Parallel provisions substitute the National Health Practitioner Ombudsman for references to the Commonwealth Ombudsman and provide for appointment, staffing, delegation and financial reporting subject to Ministerial Council oversight (ss 25(a)-(c), 26(b), 27(d)-(f), 28-29). The Regulation also modifies certain safeguards about suspension and removal (s 27(e)).

4. National Boards. The National Boards listed in s 4 are continued and are required to keep the public registers set out in s 5. That directly affects the boards named (eg Medical Board of Australia, Nursing and Midwifery Board, Pharmacy Board, Psychology Board, etc) and their registrants, since the Reg specifies registrable occupations and the registers to be maintained (ss 4-5).

5. Health practitioners and applicants for registration. Individuals in the professions listed under s 4 and included in the registers required by s 5 are affected, because the Regulation specifies participating day and qualification matters for paramedicine (ss 41, 41A) and a transitional clause for midwives’ professional indemnity insurance arrangements (s 40). The Regulation also governs how FOI and privacy obligations apply to information about practitioners and applicants (Parts 3-6).

6. Accreditation authorities, accreditation committees, external accreditation entities and certain appointed assessors. The FOI, Privacy and Ombudsman modifications expressly include accreditation authorities and, in certain circumstances, persons appointed by National Boards to conduct examinations or assessments (ss 26(b)(v)-(vii); 35(b)(v)-(vii)). Specialist medical colleges are also brought in relation to approved programs of study (ss 26(b)(viii), 35(b)(viii)). These entities become "agencies" or otherwise within the adjusted scope of the Commonwealth Acts as applied to the scheme.

7. Contracted service providers and agency service providers (and their subcontractors). The Regulation defines an "agency service provider" (s 23) and a "contracted service provider" (s 32) to include head contractors and subcontractors that provide goods or services for or on behalf of the National Agency. Those suppliers are brought within the Ombudsman Act and Privacy Act frameworks as modified (ss 26, 35). This definition extends certain scheme‑centric oversight and reporting obligations to private entities carrying out regulated functions or services.

8. Ministerial Council and participating jurisdictions. The Ministerial Council plays a central governance and oversight role: it appoints the Commissioner and Ombudsman on terms and remuneration it determines (ss 8(b), 27(d)), receives annual reports to lay before relevant Parliaments (ss 10(c), 29(c)), and may direct further audits of the Commissioner’s or Ombudsman’s records (ss 9(g), 28(g), 36(g)). Participating jurisdictions become the reference points for substituted statutory references to the Commonwealth, Parliament and courts (see ss 7(c), 14(b), 25(b), 34(c)).

9. Courts and tribunals. The Regulation substitutes "relevant tribunal" and relevant State/Territory courts for certain Commonwealth judicial references (eg s 14(d) replaces references to the Federal Court with the Supreme Court or another court of competent jurisdiction of a participating jurisdiction; s 17 modifies references to the Administrative Appeals Tribunal to relevant tribunals). The Regulation therefore affects where and how judicial and tribunal review takes place under the modified Acts.

In short, the Regulation affects central administrative officeholders of the national scheme (the Commissioner and Ombudsman), the National Agency and Agency Board, the roster of National Boards and registrable professions listed in ss 4-5, accreditation bodies and colleges, contracted/agency service providers including subcontractors, and the Ministerial Council and participating jurisdictions as the institutional anchors for governance, reporting and legal substitution. Each of these actors must adjust to specific substituted references, reporting obligations, audit and financial controls and modified procedural safeguards set out in the applicable Parts (Parts 3-6) and the transitional provisions (Part 8).

This Regulation does not create new criminal offences, but it imposes or adapts administrative duties and procedural rights by modifying the application of other Acts. Below are the principal duties and rights created or modified by the text, with references.

1. Financial duty to ensure efficient, lawful and properly recorded expenditure. The National Health Practitioner Privacy Commissioner and the National Health Practitioner Ombudsman are required to run operations efficiently, effectively and economically; keep proper books and records; ensure expenditure is only for lawful purposes and reasonably value‑for‑money is sought; and put in place internal control procedures to safeguard payments and receipts and to prevent fraud or mistake (see modifications in ss 9(a)-(d) for the AIC Act, s 28(a)-(d) for the Ombudsman Act, s 36(a)-(d) for the Privacy Act).

2. Annual reporting and audited financial statements. Each of the Commissioner and Ombudsman must produce an annual report within three months after the end of each financial year to the Ministerial Council (ss 10(a), 29(a)). The annual report must include a financial statement prepared in accordance with Australian Accounting Standards and audited by the Auditor‑General of a State or Territory, or an auditor engaged by an Auditor‑General (ss 10(b)(i)-(ii), 29(b)(i)-(ii)). The report must also include a performance report (ss 10(b)(ii), 29(b)(ii)), and each member of the Ministerial Council must lay the report before the relevant Parliament (ss 10(c), 29(c)).

3. Audit and further audit. The Commissioner and Ombudsman must facilitate audit of their financial statements, and the Ministerial Council may direct the Commissioner/Ombudsman to arrange for further audit of records by a qualified person (ss 9(f)-(g), 28(f)-(g), 36(f)-(g)). This creates a path for Ministerial Council oversight via audit direction.

4. Staffing, contracting and delegation powers. The Regulation grants explicit powers to the Commissioner and the Ombudsman to employ staff and engage contractors "in a way the Commissioner/Ombudsman considers appropriate", to enter into resource‑provision arrangements with other entities, and to delegate "all or any" of their functions or powers to persons they consider appropriate (s 8(d)(i)-(iv); s 27(f)(i)-(iv)). The Privacy Act application also extends the Commissioner's power to authorise entry to premises to any person the Commissioner considers appropriate (s 38(b)).

5. Disclosure of material personal interests. The Regulation requires the National Health Practitioner Privacy Commissioner to disclose to the Ministerial Council any material personal interest in a matter relating to discharge of the Commissioner’s responsibilities, and defines "material personal interest" broadly to include close family relationships and spouses (s 11(1)(b), s 11(2)). The definition of spouse includes de facto and civil partners (s 11(3)).

6. FOI publication timelines and reporting rights. The FOI Part modifies publication obligations for agencies, requiring an agency to publish information mentioned in s 8(2) of the FOI Act by 1 June 2019 (s 15(d)), and sets a deadline for review of the information publication scheme by 1 June 2024 (s 15(f)). The National Health Practitioner Privacy Commissioner may require agencies to provide information reasonably required to prepare the annual report (s 16(b)). Part VII of the FOI Act is set to commence for the scheme on 1 February 2019 (s 18), which affects review and oversight rights.

7. Modified processes for public interest determinations. The Privacy Act modifications remove the requirement that public interest determinations be made by legislative instrument (s 37(a)), instruct the Commissioner to notify the Ministerial Council of any public interest determination (s 37(b)), set timing rules for when a determination commences (s 37(c)), require the Commissioner to make the register of determinations available on a website (s 37(d)) and disapply fees for making that register publicly available (s 37(e)). The Regulation also aligns the treatment of public interest determinations with the Law’s regulation regime (s 37(g)-(h)).

8. Substitution of decision‑review routes and procedure. References to Commonwealth courts and tribunals are replaced with State/Territory equivalents and "relevant tribunals" (see ss 14(d) and 17(a)-(b)), which modifies rights to judicial or tribunal review to operate in participating jurisdictions’ courts and tribunals. The specific list of relevant tribunals is set out in s 3 (definition of "relevant tribunal").

9. Rights and duties of contracted and agency service providers. Agency service providers and contracted service providers (and their subcontractors) are captured under the Ombudsman Act and Privacy Act as modified (ss 23, 32, 26(b), 35(b)). That creates duties in those private providers to comply with information, privacy and ombudsman processes that operationally apply to the agencies.

10. Occupational and registration duties through registers. The compulsory public registers required of National Boards (s 5) create ongoing obligations for the Boards to maintain specified registers of practitioners (eg Register of Medical Practitioners, Register of Nurses, Register of Pharmacists, etc). These registers are required for the purposes of s 222(5) of the Law (s 5).

11. Appointment, removal and suspension powers. The Regulation gives the Ministerial Council the power to appoint the Commissioner and Ombudsman with terms and remuneration it decides (ss 8(b), 27(d)), and to suspend the Ombudsman without laying a statement of grounds before a Parliament and to remove the Ombudsman without an address to Parliament for misbehaviour or incapacity (s 27(e)(i)-(ii)). Those adjustments change the legal protections and procedural rights standardly associated with such appointments under the unmodified Ombudsman Act.

12. Transitional rights to complete earlier actions. Transitional provisions protect continuity: anything started by a National Board before commencement may be completed by the continued Board; decisions made before commencement are taken to be decisions of the continued Board; existing appointments of the Privacy Commissioner and Ombudsman continue for the remainder of their terms with their existing conditions (ss 44-46). Applications made under the previously applied FOI Act before commencement that remain undecided must be decided under the applied FOI Act (s 48), and internal review applications similarly transition (s 49).

These duties and rights are procedural and administrative rather than criminal or disciplinary in form. They allocate reporting, financial control and operational responsibilities to scheme officeholders and entities, alter the decision‑review mechanisms by substituting jurisdictional bodies, and expand the reach of Ombudsman and Privacy Act processes to contracted and agency service providers (including subcontractors). The Regulation also narrows or removes some Commonwealth procedural protections or review channels in favour of Ministerial Council and participating jurisdiction routes.

The Regulation itself does not create or prescribe standalone criminal penalties. Rather, it changes which enforcement and remedial mechanisms from the AIC Act, FOI Act, Ombudsman Act and Privacy Act apply to the national scheme and how those mechanisms are routed (Parts 3-6). The enforcement landscape under the Regulation should be read as the Commonwealth Acts operating in their modified form; the Regulation also inserts conditions that affect oversight, audit and removal powers. Key enforcement and compliance levers to note:

1. Audit and Ministerial Council direction. The Regulation gives the Ministerial Council powers to require further audit of the Commissioner’s and Ombudsman’s records by a qualified person (ss 9(g), 28(g), 36(g)). That provides an administrative enforcement tool whereby the Ministerial Council can direct investigative or verification activity, and require rectification through audit recommendations.

2. Annual reports and parliamentary laying. Annual reports produced by the Commissioner and Ombudsman must be laid before the Parliaments represented on the Ministerial Council (ss 10(c), 29(c)). This establishes a parliamentary transparency and accountability channel, though the reports themselves are the product of the modified reporting regime set out in the Regulation.

3. Ombudsman investigative functions as modified. The Ombudsman Act applies with modifications, so complaints or matters that fall within the modified scope (prescribed authorities, agency service providers, National Agency, Agency Board, National Boards, accreditation authorities and certain appointed examiners and specialist medical colleges) remain subject to Ombudsman investigative processes as applied by the Regulation (ss 24-26). Procedural provisions such as witness powers are subject to the Regulations under the Ombudsman Act being broadly disapplied (s 31), with the exception of witness expenses (which are excluded from the non‑application). The practical effect is a tailored Ombudsman application rather than wholesale replication of Commonwealth processes.

4. FOI and tribunal review. The FOI Act applies as modified, and procedural review rights under the FOI Act are routed to "relevant tribunals" (s 17), which the Regulation defines in s 3 (list of State/Territory tribunals). Part VII of the FOI Act begins operation for the scheme on 1 February 2019 (s 18). Where FOI obligations are breached, review and remedies under the FOI Act (as modified) will govern, and applications for review will be heard by the substituted jurisdictional tribunals (s 17).

5. Privacy Act investigatory and enforcement powers as modified. The Privacy Act is applied to the scheme with specific exclusions and modifications (Part 6). The Privacy Commissioner’s powers to authorise entry to agency premises and inspect documents are broadened to authorise any person the Commissioner considers appropriate (s 38(b)). The Regulation also changes the public interest determination process (s 37). Any enforcement action for breach of privacy obligations will be pursued under the Privacy Act as modified by the Regulation.

6. Removal and suspension of the Ombudsman. The Regulation modifies removal and suspension safeguards: the Ministerial Council may suspend the National Health Practitioner Ombudsman without presentation of a statement of grounds to a Parliament, and remove the Ombudsman for misbehaviour or incapacity without the need for an address to Parliament (s 27(e)(i)-(ii)). That materially changes the procedural protections ordinarily attached to removal of a Commonwealth Ombudsman.

7. Disapplication of subordinate instrument regimes and certain provisions. By disapplying many Regulations and specific provisions of the Commonwealth Acts (eg s 12 disapplies Regulations made under the AIC Act; s 20 disapplies Regulations under the FOI Act except fees and charges; s 31 disapplies Regulations under the Ombudsman Act other than witness expenses; s 39 disapplies Regulations under the Privacy Act), the Regulation removes some established enforcement or procedural details that would otherwise be available under those subordinate instruments. This may limit or alter mechanisms for fining, fee collection, witness handling and other procedural enforcement that are ordinarily implemented in Regulations.

8. Administrative remedies via Ministerial Council and State/Territory tribunals. Because the Regulation substitutes the Ministerial Council and participating jurisdictions for many Commonwealth references (eg ss 7(b)-(c), 14(b), 25(b), 34(b)-(d)), enforcement and remedial actions are routed to the Ministerial Council and State/Territory forums rather than to Commonwealth processes. For example, annual reports are to be presented to the Ministerial Council and laid before relevant Parliaments by members (ss 10(c), 29(c)), and FOI and tribunal review is to be conducted by relevant tribunals (s 17).

9. Contracts and obligations of private service providers. Contracted service providers and agency service providers (and their subcontractors) are brought within the Ombudsman and Privacy frameworks as modified (ss 23, 32, 26(b), 35(b)). That creates enforcement exposure for private suppliers under the scheme rules, enforceable through the Ombudsman and privacy processes applicable to the scheme.

Because the Regulation modifies the Acts rather than reproducing them in full, the precise enforcement mechanisms available (including monetary penalties, directions, determinations, or other remedies) remain those contained in the underlying Commonwealth Acts as they operate with the specified modifications. Practitioners should therefore consult the relevant Commonwealth Act provisions together with the modifications in this Regulation to identify specific penalty provisions or remedies that apply to a particular fact pattern. The Regulation makes clear, however, that oversight will frequently be exercised by the Ministerial Council (including through appointment, audit direction and report reception) and by State/Territory tribunals and courts as the substituted review venues (ss 8(b), 9(g), 10(c), 17, 27(e)).

This Regulation functions by tailoring the operation of several Commonwealth Acts to the Health Practitioner Regulation National Law scheme. The interaction is achieved primarily by substitution, exclusion and extension clauses. Key interaction points and cross‑references are:

1. Direct incorporation and modification of Commonwealth Acts. The Regulation modifies the Australian Information Commissioner Act 2010 (AIC Act), the Freedom of Information Act 1982 (FOI Act), the Ombudsman Act 1976 (Ombudsman Act) and the Privacy Act 1988 (Privacy Act) so they apply "as if" specific references and provisions were altered for the national scheme (see Parts 3-6). This is not a repeal of those Acts but a mapped application in the context of the Law, effected by the "as if" language in ss 6, 13, 24 and 33.

2. Substitution of institutional anchors. References to Commonwealth officeholders and institutions are replaced by the scheme equivalents. For example, references to the Freedom of Information Commissioner, the Privacy Commissioner or the Information Commissioner become references to the National Health Practitioner Privacy Commissioner (ss 7(a), 34(a)); references to the Ombudsman become references to the National Health Practitioner Ombudsman (ss 14(a), 25(c)); references to the Governor‑General or Minister are mapped to the Ministerial Council (ss 7(c), 25(b)); and references to the Federal Court or Administrative Appeals Tribunal are mapped to State/Territory courts and relevant tribunals (ss 14(d), 17(a)). These substitutions alter jurisdictional and procedural routes.

3. Interaction with the Health Practitioner Regulation National Law (the Law). The Regulation is linked mechanistically to the Law by multiple cross‑references where the Regulation provides "for the purposes of" specific sections of the Law (eg s 6 for s 212A(2)(c) of the Law; s 13 for s 215(2)(c); s 24 for ss 235(2)(b); s 33 for s 213(2)(b)). The Regulation thereby ties the modified Commonwealth Acts to the Law’s registration, accreditation and national scheme architecture.

4. Interaction with State/Territory Acts and tribunals. The Regulation names specific State and Territory tribunals as the "relevant tribunal" pool for review and replaces Commonwealth judicial references with State/Territory courts (s 3 definition of "relevant tribunal", s 14(d), s 17(a)). It also requires annual financial statements to be audited by a State or Territory Auditor‑General, or an auditor engaged by such an Auditor‑General (ss 10(b)(ii), 29(b)(i)(B)). These cross‑references bind Commonwealth Act processes to State/Territory institutional structures.

5. Disapplication of selected Commonwealth Act provisions. The Regulation expressly disapplies certain elements of the Commonwealth Acts. Examples: in relation to the AIC Act, provisions about establishment of the Office of the Australian Information Commissioner, the Information Advisory Committee and other functions do not apply (s 11(1)(c)(i)-(ix)); for the FOI Act, some tribunal constitution provisions do not apply and Part VIIB Division 3 does not apply (s 19); for the Ombudsman Act, the Integrity Commissioner provisions and PGPA report requirements do not apply (s 30); and for the Privacy Act, provisions about privacy codes, guidance functions and particular statutory intersections (eg AML/CTF Act, Healthcare Identifiers Act 2010) are modified or excluded (s 38(c)). Those disapplications create gaps where the Commonwealth Act would otherwise have supplied standard procedures or bodies.

6. Interaction with subordinate instrument regimes. The Regulation disapplies most Regulations made under the AIC Act, FOI Act, Ombudsman Act and Privacy Act in the scheme context (ss 12, 20, 31, 39). For the FOI Act, fees and charges remain governed by the FOI Regulations (s 20). This means many procedural and fee arrangements embedded in Commonwealth Regulations are not imported; the national scheme must therefore rely on the modified provisions and any scheme‑specific instruments.

7. Interaction with the Public Governance, Performance and Accountability Act 2013 (PGPA Act). The Regulation declares that particular scheme officeholders are not listed entities for the purposes of the PGPA Act (s 26(c)). This excludes the National Health Practitioner Ombudsman and a prescribed authority from being listed entities under that Commonwealth accountability regime, which affects their interaction with Commonwealth financial management rules and reporting through the PGPA framework.

8. Retrospective and transitional interaction with the repealed Regulations. The Regulation repeals the earlier Health Practitioner Regulation National Law Regulation and the WA variant (s 42) and provides that existing appointments and matters commenced under the repealed Regulations continue and are taken to be valid under the new Regulation (ss 44-47). It also directs that FOI applications or internal review matters that were pending under the previously applied FOI Act are to be decided under the applied FOI Act (ss 48-49).

9. Intersection with the Law’s profession‑specific provisions. The Regulation supplies participation days and prescribed qualifications relevant to the Law’s registration provisions,eg the participation day for paramedicine registration (s 41) and the prescription of the Diploma of Emergency Health Care for general registration in paramedicine (s 41A). It also specifies the transition end date for midwives’ professional indemnity insurance arrangements for the purposes of s 284(3)(b) of the Law (s 40). Those provisions directly interact with regulatory duties and registration eligibility rules under the Law.

10. Exclusions of certain Commonwealth functions and reporting obligations. The Regulation removes particular oversight and advisory functions that would otherwise be within the Commonwealth Acts, for example the Privacy Advisory Committee functions, regulatory guidance functions and reporting on Commonwealth information policy (ss 11(1)(c), 30(a), 38(c)(i)-(vii)). Those exclusions change how national policy coordination, advisory functions and cross‑agency reporting interact with Commonwealth systems.

Practitioners should therefore view the Regulation as a set of surgical amendments and scope adjustments that transplant parts of Commonwealth information, privacy, FOI and ombudsman regimes into the Health Practitioner Regulation National Law architecture. The Regulation determines which parts of those Acts interact with the Law and how processes such as audit, review, appointment and reporting are handled through substituted institutional anchors (Ministerial Council, participating jurisdictions, relevant tribunals) rather than through the Commonwealth officeholders and processes that apply outside the national scheme.

The Regulation records multiple amendment instruments and a table of amendments; these amending instruments changed definitions, the scope of modified Commonwealth Acts and particular transitional or profession‑specific provisions. The amending instruments and key recorded amendments in the document are:

• Health Practitioner Regulation National Law Amendment (Miscellaneous) Regulation 2019, No 141/2019. Published 16 December 2019 (Table of amending instruments). This instrument amended reg 22 (transitional provision for current obligation to publish information) and regs 43 and 40 (see Table of amendments: Reg. 22 Amended on 16 December 2019 by No. 141/2019 Reg. 4; Reg. 43 Amended on 16 December 2019 by No. 141/2019 Reg. 6; Reg. 40 Amended on 16 December 2019 by No. 141/2019 Reg. 5).

• Health Practitioner Regulation National Law Amendment (Professional Indemnity Insurance) Regulation 2021, No 157/2021. Published 10 December 2021 (Table of amending instruments). This amending regulation altered reg 40 (transition period for midwives’ professional indemnity insurance arrangements) and is recorded in the Table of amendments as amending reg 40 on 10 December 2021 (Reg. 40 Amended on 10 December 2021 by No. 157/2021 Reg. 4).

• Health Practitioner Regulation National Law Amendment Regulation 2022, No 1/2023 (published 30 January 2023). This instrument made multiple structural amendments effective on publication by the Victorian Government Printer (Table of amending instruments). The Table of amendments records the following items as amended on 30 January 2023 by No. 1/2023 Reg. 3(Sch. 1 cl. [1]): Reg. 3; Reg. 15; Reg. 26; and Reg. 35 (see entries: Reg. 3 Amended on 30 January 2023 by No. 1/2023 Reg. 3(Sch. 1 cl. [1]) ; Reg. 15 Amended on 30 January 2023 by No. 1/2023 Reg. 3(Sch. 1 cl. [2]) ; Reg. 26 Amended on 30 January 2023 by No. 1/2023 Reg. 3(Sch. 1 cl. [3]) ; Reg. 35 Amended on 30 January 2023 by No. 1/2023 Reg. 3(Sch. 1 cl. [4])).

• Health Practitioner Regulation National Law Amendment (Paramedicine Qualification) Regulation 2022, No 2/2023. Published 30 January 2023 (Table of amending instruments). This instrument inserted reg 41A prescribing the Diploma of Emergency Health Care for general registration in paramedicine; Table of amendments notes "Reg. 41A Inserted on 30 January 2023 by No. 2/2023 Reg. 4."

• Health Practitioner Regulation National Law Amendment (Professional Indemnity Insurance) Regulation 2023, No 127/2023. Published 8 December 2023 (Table of amending instruments). Table of amendments lists Reg. 40 Amended on 8 December 2023 by No. 127/2023 Reg. 4.

• Health Practitioner Regulation National Law Amendment (Professional Indemnity Insurance) Regulation 2025, No 26/2025. Published 13 May 2025 (Table of amending instruments). Table of amending instruments records the date of commencement as publication by the Victorian Government Printer, and the Table of amendments shows "Reg. 40 Amended on 13 May 2025 by No. 26/2025 Reg. 4."

Key observable amendment themes from the Table of amendments:

• Definitions and cross‑references were refined in 2023 (Reg. 3 and Reg. 15 amendments on 30 January 2023), likely to update lists of tribunals and agency definitions (see Reg. 3 def. of "relevant tribunal" amended; Reg. 15(b) and (c) amendments noted).
• Expansion of covered entities and clarification of principal officers for agencies occurred in the 2023 amendment set (Reg. 26 and Reg. 35 amendments), which inserted accreditation authorities, external accreditation entities and examiners/assessors into the lists of entities caught by the Ombudsman and Privacy Acts as applied to the scheme (see notes in Reg. 26(b) and Reg. 35(b) insertions).
• Multiple amendments to reg 40 (professional indemnity insurance transition for midwives) occurred across instruments in 2019, 2021, 2023 and 2025 (Reg. 40 Amended on 16 December 2019, 10 December 2021, 8 December 2023 and 13 May 2025). The running list in the Table of amendments shows reg 40 has been updated several times, culminating in s 40 as currently stating the transition period ends 31 December 2026.
• The Regulation repealed two predecessor instruments when enacted (s 42): the earlier Health Practitioner Regulation National Law Regulation and the WA variation. That repeal is recorded in the Table of amending instruments and the historical notes as part of the consolidation.

The Table of amending instruments and Table of amendments in the Regulation are the authoritative record included in the text for amendment tracking. Practitioners should consult those entries for the specific instrument citations and dates as recorded here. Where the Regulation carries cross‑references to the Law (eg ss cited for the purposes of particular Law provisions), any subsequent amendment to the Law would also affect the operational interplay; those are not reflected in this Regulation text unless specifically amended by the amending instruments recorded.

The Regulation as provided does not record or cite any litigation or court decisions. The text contains no case names, judgments, or references to judicial determinations. The only entries relevant to dispute‑resolution and review processes are procedural: it modifies which courts and tribunals are the appropriate forums for review under the FOI, Privacy and Ombudsman Acts (for example, references to the Federal Court are replaced by references to State/Territory Supreme Courts or other courts of competent jurisdiction, s 14(d); and references to the Administrative Appeals Tribunal are replaced by "relevant tribunals", s 17(a)). The "relevant tribunal" is defined in s 3 to include particular State/Territory civil and administrative tribunals (ACT Civil and Administrative Tribunal, NCAT, South Australian Civil and Administrative Tribunal, NT Civil and Administrative Tribunal, Tasmanian Magistrates Court (Administrative Appeals Division) or its replacement, QCAT, SAT, VCAT).

Because the Regulation does not itself create new causes of action and instead modifies how other Commonwealth Acts operate within the national scheme, litigation arising from the Regulation would be in the context of actions under the underlying Commonwealth Acts as applied, or disputes about the exercise of functions by the National Agency, National Boards, the Commissioner or the Ombudsman. The Regulation contains transitional protections that treat prior decisions and appointments as valid and continuing (ss 44-47), which reduces the likelihood of litigation about continuity of pre‑existing administrative action.

If litigation occurs in practice challenging the application or validity of the Regulation or of decisions made under the modified Acts, the substituted courts and tribunals listed in the Regulation would be the likely venues, operating under the substituted jurisdictional references (see ss 14(d), 17 and the definition of "relevant tribunal" in s 3). No litigated authorities are recorded in this Regulation text; practitioners should therefore search external case law and decisions in the relevant State/Territory tribunals and courts for any litigation that post‑dates this document.

This Regulation contains several technical traps for practitioners, contracting parties and decision‑makers. Below are the principal "gotchas" with direct references so users can assess compliance risk and implementation choices.

1. Broad subcontractor capture. The definitions of "agency service provider" (s 23(2)) and "contracted service provider" (s 32(2)) expressly capture subcontractors who provide goods or services "for or on behalf of" a head contractor supplying the National Agency. That means parties producing downstream services may be within the Ombudsman and Privacy Act frameworks as modified, even if their contract is solely with a private head contractor. Those entities should not assume that only prime contractors have scheme obligations.

2. Ministerial Council sets appointment terms and removal pathway. The National Health Practitioner Privacy Commissioner and Ombudsman are appointed on remuneration and terms decided by the Ministerial Council rather than under the Commonwealth Acts’ appointment regimes (s 8(b), s 27(d)). More consequentially, the Ombudsman may be suspended without a statement of grounds being laid before Parliament and removed without a parliamentary address for misbehaviour or incapacity (s 27(e)(i)-(ii)). These procedural deviations reduce some of the institutional safeguards that apply under standard Commonwealth appointment and removal processes.

3. Exclusion of many Commonwealth safeguards and bodies. Sections such as s 11(1)(c) list a series of AIC Act functions that do not apply to the scheme (establishment of the Office, Information Advisory Committee, functions promoting FOI awareness, etc). Similar exclusions appear in ss 30 and 38(c) for the Ombudsman and Privacy Acts respectively. Where stakeholders expect standard Commonwealth committees, advisory bodies or guidance instruments to exist, those expectations may be misplaced in this scheme.

4. Narrowed subordinate instrument regime. The Regulation disapplies Regulations made under the AIC Act, FOI Act, Ombudsman Act and Privacy Act in the scheme context (ss 12, 20, 31, 39), with limited carveouts (eg FOI fees and charges remain in force, s 20). Consequently, many procedural or fee‑setting details commonly found in Commonwealth Regulations are not available; scheme parties must rely on the Regulation and any scheme‑specific instruments for procedural detail.

5. Public interest determinations process changed. The Privacy Act modification removes the requirement that public interest determinations be made by legislative instrument (s 37(a)). The Commissioner must notify the Ministerial Council and publish the register online (s 37(b)-(d)), and fees for publishing the register are disapplied (s 37(e)). This creates a different administrative architecture for public interest determinations that alters parliamentary oversight and formal legislative instrument requirements; practitioners relying on the protections or review avenues that accompany legislative instruments should heed the change.

6. Expanded authorisation to enter premises. The Privacy Act modification extends the Commissioner’s power to authorise persons to enter premises occupied by an agency and inspect documents to any person the Commissioner considers appropriate (s 38(b)). That is broader than many standard limits on authorised officers and may increase compliance and confidentiality risk for agencies and contracted service providers.

7. Financial audit and reporting obligations tied to State/Territory Auditors‑General. The Regulation requires audited financial statements to be audited by a State/Territory Auditor‑General or an auditor employed or engaged by an Auditor‑General (ss 10(b)(ii), 29(b)(i)(B)). Entities used to Commonwealth audit arrangements must budget for and engage with State/Territory audit processes, which may have different timetables, criteria and cost implications.

8. FOI publication deadlines and delayed Part VII. The Regulation requires agencies to publish the information mentioned in s 8(2) of the FOI Act by 1 June 2019 and to complete a review of the information publication scheme by 1 June 2024 (s 15(d), (f)). Part VII of the FOI Act is set to commence for the scheme on 1 February 2019 (s 18). Practitioners need to ensure FOI publication readiness by those dates and be aware that some FOI procedural elements commence on a set date.

9. Continuity presumption for pre‑commencement decisions and appointments. The Regulation declares that everything started or decided by a National Board before commencement may be completed or is taken to remain valid under the continued Board (s 44) and that existing appointments of the Commissioner and Ombudsman continue for their remainder terms (ss 45-46). That continuity reduces disputes about invalidity of decisions made before commencement but may obscure whether any changed procedural standards apply to ongoing matters.

10. Multiple, overlapping amendments to transitional PII arrangements for midwives. Section 40 has been amended several times (see Table of amendments entries), finalising the transition period end date as 31 December 2026. Parties dealing with midwives’ professional indemnity should track those amendments and the specific obligations under the Law section referenced by s 40 (s 284(3)(b)).

11. Registers and public disclosure obligations. National Boards are required to keep specified public national registers (s 5). Each Board must ensure accurate maintenance and likely needs systems for publishing and updating registrant information. Entities must be prepared for public disclosure of registration status and related information under the Law’s register requirements.

12. Substitution of courts and tribunals may affect remedies and procedural timing. By replacing Commonwealth courts and AAT references with State/Territory equivalents and a list of relevant tribunals (ss 14(d), 17(a), s 3 definition), the Regulation changes the procedural and jurisdictional landscape for appeals and reviews. Practitioners must map review timelines and procedures to the substituted bodies.

These "gotchas" are material in practice because they alter institutional protections, broaden supply‑chain coverage, change audit and reporting standards, and remove familiar Commonwealth regulatory scaffolding. Parties should not assume that Commonwealth procedures and safeguards apply in the same form within the national scheme; instead, the Regulation’s specified substitutions and exclusions govern.

Compliance under this Regulation means operating under the Law and the various Commonwealth Acts as they are expressly modified here. Below is a practical, source‑grounded compliance checklist for the principal affected parties (National Agency/Agency Board, National Boards, the Commissioner, the Ombudsman, accreditation bodies, contracted/agency service providers and registrants). Each item cites the relevant clause.

1. Identify entity status and coverage

• Determine whether your organisation is an "agency", "contracted service provider" or "agency service provider" within the meaning used in Parts 4-6. See definitions and coverage in ss 23 (agency service provider) and 32 (contracted service provider), and the lists of agencies in ss 15(b), 26(b) and 35(b).
• If you are an accreditation authority, specialist medical college, an external accreditation entity, or a person appointed to conduct examinations under the Law, note you are expressly captured (see ss 26(b)(v)-(viii), 35(b)(v)-(viii)).

2. Financial governance and record keeping

• Commissioner and Ombudsman must ensure operations are carried out "efficiently, effectively and economically" and must keep proper books and records for funds held (ss 9(a)-(b), 28(a)-(b), 36(a)-(b)). Implement internal control procedures to ensure correctness and prevention of fraud or mistake (ss 9(d), 28(d), 36(d)).
• Arrange financial systems consistent with Australian Accounting Standards to prepare audited financial statements for inclusion in the annual report (ss 9(e), 28(e), 36(e)).

3. Annual reporting and audit

• Prepare an annual report within three months after the end of the financial year and submit it to the Ministerial Council (ss 10(a), 29(a)). Include an audited financial statement and a performance report (ss 10(b)(i)-(ii), 29(b)(i)-(ii)).
• Ensure the financial statement is audited by a State/Territory Auditor‑General or an auditor appointed/engaged by such an Auditor‑General (ss 10(b)(ii), 29(b)(i)(B)). Budget time and cost for these audits and ensure records are available to facilitate the audit (ss 9(f), 28(f), 36(f)).

4. Audit directions from the Ministerial Council

• Be prepared to take action if the Ministerial Council directs further audit of records by a qualified person and to facilitate that audit (ss 9(g), 28(g), 36(g)). Maintain auditable records and an internal audit trail.

5. Public interest determinations and website publication

• If the Commissioner makes public interest determinations under the Privacy Act, publish the determinations on the Commissioner’s website without charging a fee for access (s 37(d)-(e)). Notify the Ministerial Council in writing as soon as practicable after making a determination (s 37(b)). Registering and timely web publication are required (s 37(a)-(d)).

6. FOI publication and compliance timeline

• Meet the FOI Act publication requirement for information mentioned in s 8(2) of the FOI Act by 1 June 2019 (s 15(d)). Also plan for the required review of the information publication scheme by 1 June 2024 (s 15(f)).
• Be aware Part VII of the FOI Act applies from 1 February 2019 (s 18), which may affect administrative procedures and review avenues.

7. Appointment and disclosure obligations

• If the Privacy Commissioner role is held, disclose any material personal interest concerning matters related to the Commissioner’s responsibilities to the Ministerial Council (s 11(1)(b)). Understand the breadth of "material personal interest" in s 11(2) (family relationships, spouses and their families) and that spouse includes de facto and civil partners (s 11(3)).

8. Staffing, contracting and delegation

• The Commissioner and Ombudsman can employ staff, engage contractors or consultants and delegate functions in the way they consider appropriate (s 8(d), s 27(f)). Ensure contracts and delegation instruments are documented and consistent with internal control procedures specified in ss 9(d), 28(d), 36(d).

9. Privacy compliance and authorised inspectors

• For privacy compliance, note the Commissioner may authorise any person considered appropriate to enter agency premises and inspect documents (s 38(b)). Ensure facilities, records management and confidentiality controls are in place to respond to authorised inspections.

10. Contracts with the National Agency

• If you are contracting with the National Agency, establish whether your contract or any subcontract will bring you within the definitions of contracted/agency service provider. Where you are within those definitions, implement privacy, record‑keeping and complaint‑handling protocols consistent with the Ombudsman and Privacy Acts as modified (ss 23, 32, 26(b), 35(b)).

11. Registers and National Boards

• If you are a National Board, ensure the public national register(s) mandated in s 5 are maintained in accordance with the Law’s requirements (s 5). Review processes that feed those registers for data accuracy, privacy compliance and publication mechanisms.

12. Transitional matters

• Where you are subject to actions begun before the Regulation commenced, note that the Regulation preserves continuity: decisions and processes started by a National Board before commencement may be completed by the continued Board and are taken to be decisions of the continued Board (s 44). Existing appointments as acting or substantive officeholders continue as provided (ss 45-47).

13. Midwives’ professional indemnity arrangements

• If involved in private midwifery practice, note the transition period end date applicable to section 284(3)(b) of the Law: 31 December 2026 (s 40). Review professional indemnity arrangements against the timeline and the Law’s requirements.

14. Paramedicine participation and qualifications

• For paramedicine registration purposes, the prescribed participation day is 1 December 2018 (s 41), and the Diploma of Emergency Health Care is a prescribed qualification for general registration (s 41A). Ensure applicants and education providers are aware of these specifications.

15. Review and dispute channels

• Map FOI and internal review processes to the relevant tribunals listed in the definition of "relevant tribunal" (s 3) and in s 17, and ensure administrative records and timelines conform to the procedures and appeal windows of those State/Territory bodies.

16. Map exclusions and check for missing Commonwealth instruments

• Because the Regulation disapplies many Commonwealth Regulations and certain Act provisions (ss 12, 20, 31, 39, and targeted exclusions in ss 11, 30, 38), agencies and private providers should identify where guidance, fees, witness expense rules, or other procedures would ordinarily appear in Commonwealth Regulations and put scheme‑specific policies or contracts in place to cover those operational gaps.

17. Documentation and transparency

• Maintain clear documentation of policies, decisions, delegation instruments and contract terms. Given the emphasis on annual reporting (ss 10, 29) and potential Ministerial Council audits (ss 9(g), 28(g), 36(g)), ensure records are auditable and accessible to auditors and oversight bodies as permitted.

18. Legal review and subscription to updates

• Regularly review the Table of amendments and the enacted amending instruments (as set out in the Regulation’s Table of amending instruments and Table of amendments) to identify any changes to definitions, entity coverage or transitional deadlines. The 2019, 2021, 2022/2023 and 2025 amending instruments (see Table of amending instruments) altered scope and timelines and may continue to do so.

This checklist is a source‑grounded operational roadmap: compliance requires both meeting the specific statutory reporting, audit and disclosure requirements in the Regulation (ss 9-10, 28-29, 36-37) and implementing policies and contracts to bridge the procedural gaps left by the Regulation’s partial disapplication of Commonwealth Regulations and advisory functions (ss 11(1)(c), 12, 20, 31, 39). Parties should align internal processes to the substituted institutional architecture (Ministerial Council, relevant tribunals, State/Territory Auditors‑General) and ensure procurement and subcontracting arrangements reflect the broader capture of private suppliers under the scheme definitions (ss 23, 32).