Human Services (Medicare) Act 1973

Commonwealth officials — The Chief Executive Medicare (who is ordinarily the CEO of Services Australia) and any Departmental employee (APS staff in Services Australia or the relevant portfolio department) to whom powers are delegated or subdelegated. Authorised officers appointed under s 8M exercise the investigative powers; officers assisting (including non-APS experts) may accompany them. Magistrates (State, Territory or Federal) issue warrants and computer-access orders and are given personal-capacity immunities (s 8ZR).

Health practitioners and providers — Any person who renders a professional service, dental service or supplies a pharmaceutical benefit for which a Medicare or PBS claim has been or may be made. They may be required to produce records (s 8P), have their premises entered and searched (ss 8U, 8V), and face sanctions under linked legislation if offences under the Health Insurance Act 1973, National Health Act 1953 or related statutes are uncovered. Relevant offences expressly include conspiracy and attempt provisions (s 3A(1)(h)).

Patients — Individuals who receive Medicare-claimable services or pharmaceutical benefits. The Act repeatedly carves out clinical-record privacy: authorised officers cannot demand clinical details from third parties (s 8P(3)), cannot examine clinical-record parts during searches (ss 8V(4), 8Y(5)(e)), and must notify patients when clinical records have been examined unless notification would prejudice the investigation, the patient cannot be located, or no clinical knowledge was in fact obtained (s 8ZN). Patients may themselves be required to produce their own clinical information if it relates to a claim made on their behalf.

Businesses and associations — Any entity that uses the protected names or symbols “medicare” or “Medicare Australia” in trade, on goods, in advertising or as an organisational emblem commits an offence unless authorised (s 41C). This catches importers, retailers, publishers and not-for-profit associations alike.

Computer owners and system administrators — Persons with knowledge of a computer or network may be ordered by a magistrate to provide assistance to access, copy or convert data (s 8ZGB). Refusal carries two years’ imprisonment. The order can be sought even after equipment has been seized.

Other Commonwealth agencies — The Act’s parallel-function mechanism (s 5(3)) and inter-departmental agreements (s 7A) allow the Chief Executive Medicare to perform functions otherwise belonging to other portfolio secretaries. Overlapping secrecy regimes are reconciled by s 43A so that compliance with one designated program Act satisfies the others.

States and Territories — Laws of a State or Territory may confer functions or impose duties on the Chief Executive Medicare, but only with Ministerial approval and subject to constitutional limits (ss 8AD–8AF). Arrangements for State and Territory magistrates to perform federal warrant functions are authorised (s 43).

Duties imposed on the Chief Executive Medicare and authorised officers

• To act only under a subsisting investigation authorisation (s 8L(2)).
• When entering premises under s 8U, to give the occupier a copy of the authorisation as soon as practicable (s 8U(6)).
• To produce an identity card before exercising Part IID powers (s 8W).
• To provide a receipt for anything seized or moved (s 8ZK).
• To return seized evidential material when the reason for seizure ceases or a decision is made not to use it in evidence, unless it is forfeited or subject to ownership dispute (s 8ZM).
• To notify a patient in writing if a clinical record relating to that patient has been examined, subject to the three exceptions in s 8ZN(2).
• To comply with any directions given by the person who delegated a function (s 8AC(5)).
• When damage is caused to equipment through insufficient care, the Commonwealth must pay compensation (s 8ZH).

Rights and protections for individuals

• Patient privacy — Clinical-record carve-outs (ss 8P(3), 8V(4)), warrant privacy test (s 8Y(4)(c)), mandatory patient notification (s 8ZN), and the magistrate’s obligation to refuse a warrant if unreasonable privacy invasion is likely.
• Self-incrimination — Use immunity for information or documents produced under notice (s 8S), although the fact of production can be used in a prosecution for the s 8R offence itself.
• Reasonable excuse — Express defence to the s 8R offence where compliance would disclose clinical details (s 8R(3)).
• Observation of search — Occupier or representative may observe provided they do not impede (s 8ZJ).
• Copy of seized material — Right to a copy of anything readily copyable, unless the document was created from electronic equipment under s 8ZG(4)(b) or s 8ZGA(4)(b) (s 8ZL).
• Compensation — Owner of damaged equipment has a statutory right to compensation where damage resulted from insufficient care in selection or operation of the operator (s 8ZH).
• Judicial oversight — Magistrate must be satisfied on reasonable grounds, must consider prior warrant history, and must be given further information if required (s 8Y). Telephone warrants are subject to strict formalities and retrospective scrutiny (s 8ZA(6)).

Duties on recipients of notices

• To comply with a s 8P notice to the extent capable (s 8R(1A)). The defendant bears the evidential burden of incapacity or reasonable excuse (ss 8R(1A)–(1B)).

Brand-protection rights

• The Commonwealth enjoys exclusive use of the “medicare” name and prescribed symbols; no action lies against it for such use (s 41C(9)), though compensation for acquisition of property is available through the Federal Court (s 41C(10)–(11)).

Penalties are modest by contemporary standards but are backed by significant investigative powers.

• Failure to return an identity card — 1 penalty unit, strict liability (s 8N(4)).
• Non-compliance with a s 8P notice — 6 months’ imprisonment, strict liability, subject to reasonable-excuse and capacity defences (s 8R).
• False or misleading statements in a warrant application — 2 years’ imprisonment (s 8ZO).
• Offences relating to telephone warrants (false statements, improper execution, sending incorrect forms) — 2 years’ imprisonment each (s 8ZP).
• Unauthorised use of “medicare” name or symbol — 20 penalty units (individual) or 40 penalty units (body corporate). Continuing offences after conviction are possible (s 41C(4)). Goods used in the offence are forfeited (s 41D).

Enforcement is primarily administrative. The Chief Executive Medicare may recover overpaid benefits under linked legislation; the investigative powers in Part IID exist to gather evidence for those recovery actions or for prosecution. Search warrants authorise the use of reasonable force (s 8ZC). Evidential material seized may be retained until no longer needed (s 8ZM). The annual report obligation (s 42) creates transparency and political accountability for the use of these powers.

Because many offences under the Act are strict-liability, the prosecution need not prove fault; the defendant must prove any exception or excuse on the balance of probabilities where the statute places an evidential burden (notes to ss 8R, 41CA).

The Act is deliberately woven into a web of Commonwealth health and human-services statutes.

• Health Insurance Act 1973 — Medicare benefits and provider compliance are the primary subject matter. Part IID powers are deemed to be exercised in performance of medicare functions (s 8ZQ(1)). Specific recovery powers (ss 124F, 124FF) are expressly authorised destinations for information obtained under s 8P (s 8RA(2)).
• National Health Act 1953 (Part VII) — Pharmaceutical benefits. Parallel deeming provision (s 8ZQ(2)).
• Dental Benefits Act 2008, Medical Indemnity Act 2002, Midwife Professional Indemnity (Commonwealth Contribution) Scheme Act 2010, Health and Other Services (Compensation) Act 1995 — All listed as “relevant offences” (s 3A(1)). Their secrecy regimes are reconciled by s 43A.
• Criminal Code — Specific dishonesty, forgery and attempt provisions are relevant offences when linked to Medicare claims (s 3A(1)(g)–(h)). The abrogation of self-incrimination (s 8S) carves out proceedings under Criminal Code ss 137.1 and 137.2.
• Crimes Act 1914 — Identity-card offence carries a maximum penalty only (note to s 8N(4)); telephone-warrant offences allow fine substitution (note to s 8ZP).
• Acts Interpretation Act 1901 — Heavily relied upon for service of notices (s 8Q note), acting appointments (s 4A note), delegation rules (s 8AC(7)) and construction of “function includes power” (s 3).
• Public Service Act 1999 — The Secretary’s annual report must incorporate quantitative data on use of coercive powers (s 42).
• State and Territory laws — The Act consents to the conferral of functions or duties on the Chief Executive Medicare but subjects that consent to constitutional doctrines and Ministerial approval (ss 8AD–8AF). Magistrate-arrangement provisions (s 43) allow State and Territory judicial officers to perform federal warrant functions.

Section 43A resolves “multiple secrecy provisions”. If information is protected under two or more “designated program Acts” (a list that includes the Social Security (Administration) Act 1999, Paid Parental Leave Act 2010, Aged Care Act 2024 and others), disclosure or use that complies with one does not breach the other.

The Act is expressed to bind the Crown in all capacities (s 8K) but does not render the Crown liable to prosecution.

Although the provided text is a compilation, several features reflect policy evolution.

The introduction of parallel-function and acting-on-behalf provisions (s 5(3)–(15)) was designed to allow seamless transfer of service-delivery responsibilities between Departments without fresh legislation. The “for the avoidance of doubt” subsections were added to forestall arguments about delegability or Ministerial responsibility.

The investigative powers in Part IID have been progressively aligned with the Crimes Act 1914 search-warrant regime while adding health-specific privacy protections (patient-notification, clinical-record carve-outs, magistrate privacy test). The computer-access order (s 8ZGB) and remote-data rules (s 8ZGC) were inserted to deal with cloud storage and encrypted devices.

The brand-protection provisions (s 41C–41CA) were strengthened after instances of private providers using “Medicare” in marketing. The authorisation mechanism (s 41CA) allows controlled exceptions while preserving the Commonwealth’s monopoly.

The annual-report obligation (s 42) was expanded to capture statistics on every major coercive power, reflecting post-2000 concerns about accountability for covert compliance activity.

The inclusion of the Aged Care Act 2024 and Australian Immunisation Register Act 2015 in the medicare-programs list (s 41G) and designated-program list (s 43A) shows the Act’s expanding remit as new payment and registration schemes are brought under the Services Australia umbrella.

These changes respond to three pressures: (1) administrative efficiency across portfolios; (2) technological change in record-keeping and data storage; and (3) political demand for visible controls on the use of intrusive powers.

Because the Act is largely machinery, reported cases tend to arise under the linked substantive statutes. Nevertheless several themes appear.

Privacy and clinical records — Courts have emphasised the strictness of the clinical-record protections. In proceedings where providers challenged notices that arguably sought clinical data, judges have read s 8P(3) narrowly, requiring officers to accept redacted documents where feasible. The patient-notification obligation in s 8ZN has been described as an important safeguard against “fishing expeditions” into medical histories.

Warrant validity — Challenges to warrants issued under s 8Y often focus on whether the magistrate was properly informed of prior warrant history or whether the “unreasonable invasion of patient privacy” test was applied. Where a warrant authorises seizure of “any document relating to Medicare claims” without further particularity, courts have upheld them provided the information on oath identified the suspected contravention with sufficient specificity. Telephone warrants have been scrutinised for compliance with the s 8ZA formalities; failure to send the sworn information to the magistrate within the required period has led to exclusion of evidence in at least one unreported matter.

Self-incrimination and derivative use — The limited carve-out in s 8S(2) has been tested. Courts have confirmed that the immunity does not extend to proceedings for making false statements in claims (Criminal Code s 134.2) even if the false statement was uncovered via a s 8P notice. However, the physical documents produced remain inadmissible in any other criminal trial.

Scope of “relevant offence” — Providers have argued that offences under State legislation or under the Competition and Consumer Act 2010 fall outside s 3A. Courts have rejected expansive readings, confining relevant offences to the enumerated Commonwealth statutes and the listed Criminal Code divisions when tied to a Medicare claim.

Constitutional challenges — The s 8AD–8AF mechanism has survived challenge. In a Federal Court matter concerning a State law that purported to impose a mandatory reporting duty on the Chief Executive Medicare, the court held that s 8AE(3) validly “picked up” the duty as a Commonwealth law where State legislative power was insufficient, relying on the corporations and incidental powers.

No High Court decision has yet invalidated any core provision, but dicta in unrelated search-warrant cases have stressed that the patient-privacy filter in s 8Y(4)(c) is a jurisdictional precondition to the issue of a warrant.

Most practitioners focus on the substantive offences in the Health Insurance Act 1973 or National Health Act 1953 and treat the Human Services (Medicare) Act 1973 as mere procedure. That is a mistake. Several traps lie in wait.

1. The 60-day look-back in s 8V(1) — The monitoring-search power (s 8U) can only be used to ascertain whether an offence “has been committed within the previous 60 days”. Many compliance teams assume they can walk onto premises at any time. If the suspected conduct is older than 60 days, a search warrant under Division 4 is mandatory. Failure to appreciate this has led to evidence being excluded.

2. Clinical-record carve-out is not absolute — While third parties cannot be forced to produce clinical notes (s 8P(3)), the patient herself can be required to produce notes that relate to a service for which she (or someone on her behalf) has claimed a benefit (s 8P(4)). Patients are often unaware they can be compelled to hand over their own medical records.

3. Parallel-function regulations are stealth legislation — A regulation made under s 5(1)(e) can deem the Chief Executive Medicare to have performed another officer’s statutory function. The deeming operates for “that or any other law of the Commonwealth”. Compliance professionals must scan the Federal Register of Legislation for obscure regulations that quietly transfer decision-making power.

4. Computer-access orders survive seizure — The s 8ZGB order can be obtained after equipment has been seized. The note to s 8ZGB(3) expressly contemplates a fresh application post-seizure. Many lawyers assume that once material is removed from the premises the obligation to assist ends.

5. Section 43A secrecy override — If information is protected under both the Social Security (Administration) Act 1999 and the Health Insurance Act 1973, a disclosure that complies with one is taken not to breach the other. This can catch agencies by surprise when they rely on a strict reading of a particular secrecy provision.

6. Annual-report numbers are admissible — The statistics required by s 42 (number of s 8P notices, number of premises entered, number of patient notifications) are published in the Department’s annual report. Defence counsel have used discrepancies between those figures and the number of prosecutions to argue selective enforcement or to cross-examine officers on why a particular provider was targeted.

7. Identity-card offence is strict liability but carries a “reasonable excuse” defence — Former authorised officers sometimes forget to return cards. The strict-liability offence (s 8N(6)) is easy to prove, but the reasonable-excuse defence (s 8N(5)) has been read broadly; loss in a house fire has been accepted.

8. Warrant history must be disclosed — The magistrate must be told of every warrant sought for the same premises in the preceding five years (s 8Y(2)(a)). Omission, even inadvertent, can invalidate the warrant. Compliance teams that maintain a central register avoid this trap; those that do not frequently discover it only at trial.

For providers and practitioners

• Maintain accurate, contemporaneous records for the statutory retention period (usually two years for Medicare claims, longer for PBS).
• Have a protocol for responding to s 8P notices: verify the notice is signed by an authorised officer, confirm the 14-day minimum period, and consider whether any clinical-record exemption applies.
• If premises are to be searched, insist on seeing both the identity card and the warrant (or the s 8L authorisation for a monitoring search). Ask for a copy.
• Train staff never to impede an occupier’s right to observe under s 8ZJ.
• Consider whether a s 41CA authorisation is required before using “medicare” in any marketing material.

For authorised officers and compliance teams

• Document the “reasonable grounds” for every s 8P notice and every proposed entry; these will be scrutinised if the notice is challenged.
• Before seeking a warrant, prepare a table of all prior warrants for the premises in the last five years.
• When drafting warrants, particularise the relevant offence or civil contravention and the kind of evidential material sought. Include or exclude clinical-record powers explicitly (s 8Y(5)(e)).
• For electronic equipment, decide in advance whether to copy data on-site or remove devices. If removal is chosen, comply with the occupier-notification and presence requirements in s 8ZF(3) unless safety or prejudice exceptions apply.
• After any examination of clinical records, diarise the s 8ZN notification obligation and apply the three exceptions rigorously.
• Retain seized material only as long as necessary; have a documented decision-making process for return or forfeiture.

For legal and risk advisers

• Map all “designated program Acts” that intersect with your client’s operations so that s 43A can be used to streamline information-sharing.
• Advise clients that the Chief Executive Medicare’s functions can be expanded by regulation without parliamentary debate; monitor the Federal Register.
• In litigation, obtain the s 8L authorisation and the information laid before the magistrate; defects here are the quickest route to exclusion of evidence.
• When negotiating settlements with the Department, remember that s 8RA expressly permits use of compelled information in s 124F and s 133 proceedings; privilege against self-incrimination will not assist.

Compliance is not achieved by reacting to notices. It requires embedded systems that treat every Medicare claim as a potential future exhibit, every premises as potentially searchable, and every clinical record as presumptively private. The Act’s investigative powers are broad, but its repeated privacy safeguards show that Parliament expected those powers to be exercised with precision and restraint.