sec.188Giving access to the system

sec.188 Giving access to the system

A system administrator of an entity’s electronic prescription management system must not give a person access to the system unless the administrator reasonably believes— the person works for the entity; and the access given is limited to the extent required for the person to perform the person’s role or function for the entity; and the person has appropriate authorisation under the Act to use the system to perform the person’s role or function for the entity. Maximum penalty—80 penalty units. A prescriber working for the entity is given access to view information and record prescriptions about the entity’s patients. A dispenser working for the entity is given access to retrieve prescriptions and record information when dispensing medicines for the entity’s patients. An information technology technician working for the entity is given access to perform administrative or technical tasks to maintain the security of the electronic prescription management system. A person given access to an entity’s electronic prescription management system under subsection (1) is an approved user of the system. The system administrator must give each approved user only 1 secure system identifier for the electronic prescription management system. Maximum penalty—80 penalty units. (sec.188-ssec.1) A system administrator of an entity’s electronic prescription management system must not give a person access to the system unless the administrator reasonably believes— the person works for the entity; and the access given is limited to the extent required for the person to perform the person’s role or function for the entity; and the person has appropriate authorisation under the Act to use the system to perform the person’s role or function for the entity. Maximum penalty—80 penalty units. A prescriber working for the entity is given access to view information and record prescriptions about the entity’s patients. A dispenser working for the entity is given access to retrieve prescriptions and record information when dispensing medicines for the entity’s patients. An information technology technician working for the entity is given access to perform administrative or technical tasks to maintain the security of the electronic prescription management system. (sec.188-ssec.2) A person given access to an entity’s electronic prescription management system under subsection (1) is an approved user of the system. (sec.188-ssec.3) The system administrator must give each approved user only 1 secure system identifier for the electronic prescription management system. Maximum penalty—80 penalty units.

• (a) the person works for the entity; and
• (b) the access given is limited to the extent required for the person to perform the person’s role or function for the entity; and
• (c) the person has appropriate authorisation under the Act to use the system to perform the person’s role or function for the entity.