38. Requirement to notify the System Operator of certain things

(1) This rule applies if a contracted service provider:

(a) becomes aware, or suspects, that:

(i) the contracted service provider has given the System Operator, or uploaded to the My Health Record system, inaccurate provenance information;

(ii) there is a non-clinical, My Health Record system-related error in a record that has been accessed via, or downloaded from, the My Health Record system;

(iii) under rule 34(3), a registered healthcare provider organisation for which the contracted service provider provides services is no longer linked to the contracted service provider;

(b) undergoes a material change;

(c) has appointed, or cancelled the appointment of, a contracted service provider officer under rule 36; or

(d) changes, or becomes aware of a change in, the professional or business details of its currently appointed contracted service provider officer.

(2) A contracted service provider must:

(a) give the System Operator, in writing, details of the event or circumstances; and

(b) do so within two business days of become aware or suspecting the event or circumstance.