40. Requirement to provide assistance

(1) At the System Operator’s request, a contracted service provider must promptly provide all necessary assistance in relation to any inquiry, audit, review, assessment, investigation or complaint in connection with the My Health Record system conducted, handled, requested or facilitated by the System Operator.

(2) Subrule (1) does not apply unless the System Operator gives the contracted service provider reasonable notice of the assistance required.

Division 3 Security requirements for healthcare provider organisations