National Health Security Act 2007

Who it affects:

• State and territory health departments (they must report disease cases)
• Travellers entering or leaving Australia who may be under health monitoring
• Anyone whose personal health information is shared under the system (privacy protections apply — misusing this information carries up to 2 years' imprisonment)
• The general public benefits indirectly through faster detection and response to outbreaks

Pillar 2: Controlling Dangerous Biological Agents (Part 3)

What it does:

• Creates a List of Security-Sensitive Biological Agents (SSBAs) — dangerous pathogens (disease-causing microbes) and toxins that could potentially be weaponised (e.g., anthrax, smallpox, botulinum toxin)
• Anyone (individual, company, or government agency) who handles these agents must:
  • Register with the government via a National Register
  • Have a legitimate purpose (e.g., vaccine research, diagnostic testing, forensic work)
  • Comply with security standards (SSBA Standards) — covering storage, transport, and who is allowed access
  • Report any suspicious findings, transfers, thefts, losses, or disposals
• If a lab suspects a sample might be an SSBA, they must either arrange confirmatory testing or destroy it within 2 business days
• Inspectors can enter facilities to check compliance
• Penalties for breaches are substantial — up to 500 penalty units per offence (for companies, up to 2,500 penalty units)

Who it affects:

• Research laboratories and universities handling dangerous pathogens
• Hospitals and diagnostic pathology labs
• Government agencies (including defence and intelligence)
• Pharmaceutical and biotech companies
• Anyone transporting these agents (though they're exempt from registration if only transporting)

Key Protections and Safeguards

• Privacy: Personal health information collected under this Act is tightly controlled. Unauthorised disclosure carries criminal penalties.
• Crown bound: The Act applies to all governments — federal, state, and territory — not just private individuals and organisations.
• International obligations: The Act implements Australia's commitments under the International Health Regulations 2005 (a WHO treaty that requires countries to detect and report public health emergencies of international concern).
• Review rights: Entities can challenge registration and related decisions.

Recent Updates

The Act has been updated to integrate with the new Australian Centre for Disease Control Act 2025, transferring key functions to the newly established CDC.