National Occupational Respiratory Disease Registry Determination 2024

The Determination organises its prescriptions around a small set of core concepts, each defined or referenced in the instrument and connected to the Act. Those core concepts are minimum notification information, additional notification information, the relevant individual and the relevant disease, exposure histories, notifying prescribed medical practitioner data, and fees for disclosure.

Minimum notification information (s 5): The Determination lists the information that satisfies subsection 12(2) of the Act for a person diagnosed with or being treated for an occupational respiratory disease (the relevant individual with the relevant disease). The list mixes mandatory items, conditionally mandatory items (e.g. "if provided by the individual"), and items that are explicitly required where specific circumstances exist (e.g. CT scan report where disease is silicosis, s 8(f)). The minimum set includes personal identifiers (name, date of birth), at least one formal identifier (healthcare identifier, Medicare number or DVA number, s 6(d)), a required telephone number (s 6(k)), key exposure metrics (total years of exposure, timing and location of last and main exposures, business/employer details if exposure was in Australia, s 7), and diagnostic details (disease name, main and secondary agents, diagnosis date, tests used and lung function values, s 8).

Additional notification information (s 10): For the purposes of subsection 12(3) of the Act, the Determination identifies further items that may be notified. These include health and lifestyle items (height, weight, smoking history), employment details (current status, job title, last employment date), medical test details and reports (s 11), and a richer occupational history for each role where exposure likely occurred (s 12). The occupational-history provision requires granular information about job tasks, use of respiratory protective equipment and workplace controls (s 12(2)(f)(iii)-(iv)).

Consent architecture: The Determination requires the recording of whether the individual has consented to notification of minimum or additional information and whether they have consented to corrections or updates (s 6(m)-(n); s 11(1)(e)-(f)). The instrument cross-references the Act’s rules on consent for corrections or updates (note referencing ss 15(5), 17(4)) and distinguishes between minor/technical changes and changes needing consent.

Prescribed medical practitioner data: The Determination prescribes contact and registration details for the notifying medical practitioner, including the myGovID email used (s 9(2)(c)), the practitioner’s specialty, work address and dates relevant to their relationship with the patient (s 9(2)(d)-(g)). This binds notification to identifiable clinicians and to an online authentication channel (myGovID).

Silicosis specificity: For silicosis diagnoses the Determination requires a copy of the CT scan report and the date the scan was performed (s 8(f)). That specific inclusion signals a higher evidentiary requirement for that disease.

Fees for disclosure (s 13): The Determination defines the method for calculating fees charged by a contracted service provider for disclosing protected information in response to a specific request under sections 21 or 22 of the Act. It prescribes rounding rules for time and sets two hourly rates depending on the purpose of disclosure (research or tailored report to state/territory), rather than a flat public schedule or a commercially-negotiated rate for all uses.

Operational links to the Act and named statutes: The Determination repeatedly references the Act (for its legal authority and cross-references to notification, correction and disclosure provisions) and requires identifiers defined in other Commonwealth statutes , the Healthcare Identifiers Act 2010 and Part VII of the National Health Act 1953 for Medicare numbers (s 6(d)). It also explicitly references the Department of Veterans’ Affairs as the departmental entity that issues a possible identifier (s 4 definition).

Collectively, these concepts map the Registry’s input data model (who, what, where, when, exposure details), the notification and consent metadata model, the practitioner identity and authentication model, a disease-specific evidentiary requirement for silicosis, and a cost-recovery model for disclosure.

The Determination affects a defined and overlapping set of actors: individuals with diagnosed or treated occupational respiratory disease (relevant individuals), the prescribed medical practitioners who diagnose or treat them and notify the Registry, contracted service providers who extract and disclose protected information, persons requesting disclosures under ss 21-22 of the Act (including researchers and State/Territory authorities), and indirectly employers and workplace operators whose information may be recorded in the Registry.

Individuals (patients): The relevant individuals are the subjects of notifications. The Determination requires collection of personal identifiers (name, date of birth, at least one formal identifier per s 6(d)), demographic data (Indigenous status, country of birth, languages, sex,if provided, s 6(c),(f)-(h)), contact details (postal address if usually living in Australia, telephone, s 6(i),(k)), health measures (height, weight, lung function values, smoking history where provided or as additional information, ss 8(g), 11(1)(a)-(b)), and consent metadata (s 6(m)-(n), s 11(1)(e)-(f)). The Determination therefore places requirements on what personal and clinical information may be recorded about an individual and records their consent decisions about notification and corrections. Individuals who have served in ways that produce a DVA number may have that identifier included (s 6(d)(iii)).

Prescribed medical practitioners: The Determination directly affects the administrative practice of prescribed medical practitioners who diagnose or treat occupational respiratory diseases (s 9(1)). It requires that notifications include the notifying practitioner’s name, contact details, myGovID email address (s 9(2)(a)-(c)), specialty and practice address (s 9(2)(d)-(e)), the date the person became the practitioner’s patient and, if treatment ceases, date and reason for cessation (s 9(2)(f)-(g)). Practitioners must also collect and submit clinical test types and results (including lung function and CT report for silicosis) and occupational exposure histories (ss 7-8, 11-12). The requirement to provide the email used to access myGovID ties notification to digital authentication.

Contracted service providers: The Determination contemplates a contracted service provider role (s 13 note, referencing s 8 of the Act). Those providers extract information from the Registry and prepare it for disclosure; the Determination sets how they may charge for that work (s 13). The work includes extraction and preparing information for disclosure, and the provider is entitled to multiply hourly rates by hours spent, rounded by the specified rule (s 13(2)-(4)).

Requesters: Persons who request protected information under sections 21 or 22 of the Act are affected by the fee schedule and by what information is available for disclosure. Two classes are explicitly priced: disclosures for research (hourly rate $49.50) and tailored reports for State/Territory authorities ($66.00 per hour) (s 13(4)). The instrument does not specify a rate for other requesters; the Act’s ss 21-22 regime (not reproduced in this Determination) will govern eligibility and procedural requirements.

Employers and workplaces: The Determination requires, where an exposure occurred in Australia, recording of the business or employer name, contact details and office address (s 7(3)(e), s 7(4)(e)). It also requires, in occupational history entries, information about the workplace location of exposure, main and secondary agents, job tasks, PPE use, and controls such as ventilation (s 12(2)(e)-(f)). That means employers and workplaces can be identified in the Registry when an individual’s last or main exposure happened while working for them.

State and Territory authorities: These may be recipients of tailored reports (s 13(4)(b)), and the Determination explicitly anticipates State/Territory use by pricing those reports at a higher hourly rate. That signals direct interaction between the Registry and subnational public health, regulatory or workers’ compensation bodies.

Veterans’ or DVA processes: The Determination allows for inclusion of the Department of Veterans’ Affairs number when allocated (s 6(d)(iii)) and defines the Department of Veterans’ Affairs in its definitions (s 4). That links Registry data to veteran status where relevant.

Third-party researchers and data users: The Determination’s fee architecture and the dataset’s granularity (demographics, occupation, exposure, test reports) mean that academic, clinical and epidemiological researchers will be direct users. The Determination creates different financial access paths for such researchers versus State authorities through its fee schedule (s 13(4)).

Who pays and who decides: Practically, individuals do not pay directly for notifications; prescribed medical practitioners (or their practices) bear the operational cost of collecting notification data. External requesters pay fees to contracted service providers when requesting protected information under ss 21-22, calculated under s 13. The Commonwealth Chief Medical Officer decides the Determination (intro text and s 3), and contracted service providers decide how many staff-hours are required to extract and prepare data (subject to rounding rules, s 13(3)).

Duties

Prescribed medical practitioners: Under the Act (not reproduced in full here) and as given practical effect by the Determination, notifying prescribed medical practitioners have a duty to supply the minimum notification information described in Division 1 where they notify the Commonwealth Chief Medical Officer (s 5). The Determination also establishes what additional notification information may be supplied (Division 2). Practitioners must include the notifier’s identity and contact and myGovID email (s 9(2)(a)-(c)), and where diagnosing silicosis they must include the CT report and date of scan (s 8(f)). For occupational histories, the practitioner must include details about job tasks, PPE use and control measures where available (s 12(2)(f)).

Recording consent and corrections: The Determination requires recording whether the individual has consented to notification of minimum or additional information and whether they consent to correction/updating of information (s 6(m)-(n); s 11(1)(e)-(f)). The practitioner is required to record the dates consent was given and withdrawn where applicable.

Data completeness: The Determination repeatedly conditions certain fields on "if provided by the individual" (e.g. s 6(c),(f)-(h); s 7(2), (3)(a)-(d); s 7(4)(a)-(d)). This places a practical duty on practitioners to attempt to gather such information, and to record what is and is not provided, but it also leaves data completeness subject to patient-provided information.

Contracted service providers: Under the Act and the Determination’s Part 3, contracted providers who disclose protected information may charge fees calculated by the method in s 13. They must account for hours spent extracting and preparing information and apply the rounding rule (s 13(2)-(3)).

Rights

Individuals: The Determination gives individuals confirmatory rights concerning how their consent decisions are recorded; the practitioner must record whether the individual has consented to notifications or corrections and the dates of consent or withdrawal (s 6(m)-(n); s 11(1)(e)-(f)). The Act’s provisions governing corrections (referenced in notes to s 6 and s 11) indicate that consent is required for non-minor or non-technical corrections (notes referencing ss 15(5), 17(4)).

Researchers and State/Territory authorities: These classes have the right to request protected information under sections 21 and 22 of the Act and to be charged fees for disclosure according to s 13. The Determination explicitly differentiates price by purpose: research disclosures are charged at $49.50 per hour, State/Territory tailored reports at $66.00 per hour (s 13(4)).

Notifying practitioners’ procedural rights: The Determination requires that the notifying practitioner’s identity and myGovID email be recorded (s 9(2)(a)-(c)). The myGovID detail establishes a digital authentication channel that the notifying practitioner uses to access the notification service; this is a procedural right to a secure online mechanism to transmit notifications, as implied by the requirement to supply the myGovID email.

Duty to include employer/workplace details where exposure occurred in Australia: Where the last or main exposure occurred in Australia, the Determination requires inclusion of employer name, contact and street address of the relevant office in the State or Territory or head office if no state office exists, and whether the individual still works for that employer (s 7(3)(e)(i)-(iv); s 7(4)(e)(i)-(iv)). This is a duty to attempt to record workplace identification data when the exposure location is domestic.

Limited fee types: The Determination restricts the explicit fee schedule to two specific disclosure purposes (research and tailored State/Territory reports) (s 13(4)). That both creates a right on the part of those categories to know the fee rate and leaves unspecified the position for other purposes, which will be determined under the Act’s disclosure rules (ss 21-22).

Records of cessation of treatment: If a medical practitioner ceases treating the individual for the relevant disease, the date and reason for cessation must be included (s 9(2)(g)). That creates a duty to maintain and record the treatment relationship status.

Interaction with Act provisions on corrections and disclosure: The Determination cross-references the Act’s sections related to correction, updating and disclosure (e.g. notes to s 6, s 11, and s 13 referencing ss 15, 17 and 31 of the Act), meaning duties and rights under those Act sections are engaged and must be observed in practice.

Who enforces duties: The Determination itself does not create enforcement powers; it operates within the Act’s enforcement architecture. The Chief Medical Officer makes the Determination (s 3) and the Act governs notification, disclosure and possibly penalties. The Determination allocates practical duties for data collection and defines fee mechanics for disclosures (s 13), which enforcement mechanisms in the Act would operationalise.

The Determination does not itself establish new criminal or civil penalties. Its operative provisions are rules about the content of notification (Parts 2 and 3) and the method for calculating fees for disclosures (Part 3, s 13). The instrument is made under the Act (s 3), which contains the statutory enforcement framework; the Determination refers to particular Act provisions (for example, it operates for the purposes of paragraphs 12(4)(b) and 12(4)(c) in prescribing minimum and additional notification information, s 5 and s 10, and it prescribes a fee method under paragraph 31(2)(b) of the Act, s 13). Any penalties or compliance mechanisms therefore flow from the Act rather than from this instrument.

Practical enforcement mechanisms implied by the Determination

1. Data completeness and correctness obligations: The Determination specifies data elements that must or should be provided (some conditioned on "if provided by the individual"). If the Act includes offences for failure to notify or for providing false information, the presence of this detailed Determination will define what constitutes minimum and additional notification content for enforcement purposes. The Determination itself references the Act’s correction and updating rules (notes referring to subsections 15(4), 15(5), 17(3) and 17(4)), implying the Act contains procedural and potentially remedial mechanisms for correcting registry entries.

2. Contractual enforcement for service providers: Contracted service providers operate under contract to the Commonwealth (the Act defines contracted service provider in s 8 of the Act, referenced in the Determination’s notes). Their entitlement to charge fees as prescribed by the Determination (s 13) will be enforceable under contract and subject to procurement rules and the contract’s terms.

3. Fee recovery and billing: The Determination prescribes the method and rates for fees charged by contracted service providers (s 13(2), (4)). Those fees can be billed to external requesters; enforcement of fee payment will be a function of the contractual or legislative regime in the Act governing disclosures under ss 21-22. The Determination’s rounding rule (s 13(3)) reduces disputes about fractional hours but leaves scope for disagreements on the total hours claimed.

4. Authentication and practitioner accountability: The requirement to include the myGovID email used to access the myGovID service (s 9(2)(c)) ties notifications to an authenticated digital identity. That provides an audit trail and a technical control that supports enforcement or audit functions, and it facilitates tracing back to an identifiable practitioner where questions arise about notification content or timing.

Absence of explicit penalties in the Determination

The Determination makes no mention of fines, imprisonment, disqualification, or civil liability for non-compliance with the content requirements. That is consistent with its role as a statutory instrument specifying information content and fee mechanics; enforcement and penalties would be found in the Act or in other Commonwealth law where applicable. The Determination’s references to correction processes and consent (s 6 notes and s 11 notes) indicate the Act contains mechanisms for correcting entries and imposes consent requirements for non-minor changes, but the Determination does not itself set sanctions for breach.

Risk of enforcement action tied to privacy or data handling law

While the Determination prescribes data elements (including sensitive health information and identifiers such as Medicare numbers and healthcare identifiers, s 6(d)), it does not state how privacy compliance will be enforced. Agencies collecting and disclosing information under the Act will need to observe applicable Commonwealth privacy obligations; those obligations and their enforcement, including potential administrative or civil remedies under privacy laws, arise from separate statutory regimes and are not set out in this Determination.

Practical enforcement levers likely to be used

• Contract management with contracted service providers to ensure disclosure and fee charging adhere to s 13.
• Audit of notification practices through authentication identifiers (myGovID) and the recorded dates and consent metadata (ss 6(m)-(n), 9(2)(c)).
• Procedural remedies for corrections and updates under the Act (notes to ss 6 and 11 reference ss 15 and 17 of the Act), which likely include processes for requesting corrections and possibly timelines for action.

In short, the Determination itself is a prescriptive schedule for data elements and fees; it relies on the Act and existing contractual and privacy frameworks to provide enforcement and penalties.

The Determination explicitly references and imports elements from several Commonwealth statutes and the parent Act, and it operates within broader regulatory and privacy frameworks. The instrument itself cites the Act as its authority (s 3) and cross-references particular parts of the Act for notification, correction and disclosure processes (notably ss 12, 14-17, 21-22, 31). It also references health-identifier and Medicare statutory regimes.

Identifiers and healthcare law

• Healthcare Identifiers Act 2010: The Determination requires at least one of the following identifiers: the individual's healthcare identifier (within the meaning of the Healthcare Identifiers Act 2010), a Medicare number (within the meaning of Part VII of the National Health Act 1953), or a Department of Veterans' Affairs number (s 6(d)). By tying the Registry to the healthcare identifier regime, the Determination imports the definitional and operational material from that statute and creates a practical link between Registry records and the national healthcare identifier system.

• National Health Act 1953 (Part VII): Requiring the Medicare number imports the Medicare identifier regime into Registry records (s 6(d)(ii)). That linkage facilitates cross-referencing with Medicare billing and service records, subject to statutory interoperability and privacy constraints.

Department of Veterans’ Affairs

• The Determination defines Department of Veterans’ Affairs in s 4, and allows inclusion of a DVA number if allocated to the individual (s 6(d)(iii)). That creates an intersection with the veterans’ entitlements and administrative identifiers regime, and may affect how veteran-status cases are identified in the Registry for policy or compensation intersections.

Parent Act interactions

• The Determination is made under subsections 12(4) and 31(2) of the National Occupational Respiratory Disease Registry Act 2023 (s 3). It fills in the content for minimum and additional notification information (ss 5-12 reference paragraph 12(4)(b) and 12(4)(c)) and prescribes the fee method for disclosures contemplated by s 31(2). The Act’s other provisions that govern notification procedures, correction, disclosure eligibility (ss 14-17, 21-22), and contracted service provider definitions (s 8 of the Act) will interact directly with the Determination’s content and fee mechanics. The Determination’s notes explicitly mention the Act’s sections on corrections (ss 15(5), 17(4)).

Privacy and information security frameworks

• The Determination prescribes collection of sensitive health data and identifiers, and inclusion of contact details and employer identification where applicable (Parts 2 and 3). While the Determination does not mention the Privacy Act 1988, the storage and disclosure of personal and health information at Commonwealth level will ordinarily intersect with the Privacy Act’s Australian Privacy Principles for agencies (if the Registry is an agency collection) and other regimes such as the My Health Records Act if relevant. Agencies and contracted service providers must therefore align their handling, disclosure and security practices with applicable privacy and data-protection obligations, even though those obligations are not articulated in this instrument.

Digital authentication and myGovID

• Section 9(2)(c) requires the notifying practitioner to provide the email used to access myGovID. That creates an operational dependence on the myGovID authentication system, which itself operates under separate Commonwealth digital identity arrangements. The choice of myGovID implies the Registry’s online services will authenticate practitioners through that channel, and interactions with digital identity policy and service terms will be operationally relevant.

State and Territory regulatory interaction

• The Determination anticipates tailored reports for State or Territory authorities (s 13(4)(b)). Many occupational respiratory diseases are regulated or investigated through state-level workplace health and safety regimes, and workers’ compensation schemes are state or territory-administered. The Determination's pricing and disclosure mechanics therefore promote practical data-sharing between the Commonwealth Registry and subnational authorities, subject to the Act’s disclosure rules (ss 21-22). Coordination with state privacy and public health statutes may be needed.

Contracted service provider and procurement law

• The Determination assumes the existence of contracted service providers (notes referencing s 8 of the Act). Their engagement will be governed by procurement and contracting law (Commonwealth procurement rules), contract terms, and the Act. The fee method in s 13 will inform contract pricing and billing for disclosure tasks.

Evidence and compensation regimes

• The Determination requires employer identification where exposure occurred in Australia and detailed exposure histories including PPE and controls (ss 7(3)(e), 12(2)(f)). That information will intersect with workers’ compensation processes, occupational health investigations, and potentially civil claims for workplace injury, even though the Determination does not purport to control evidentiary uses. The existence of records in the Registry may be used by other agencies or parties under the Act’s disclosure provisions (ss 21-22), subject to the Act’s indexing and disclosure rules.

Summary of interaction

The Determination is a data-specification and fee-determination instrument that operates within the Act’s architecture and draws on identifiers and systems from the Healthcare Identifiers Act 2010, the National Health Act 1953 (Medicare number), DVA identifiers, and myGovID. It does not displace or override privacy or procurement regimes; rather, it creates operational points of intersection where those other laws and systems must be taken into account by data custodians, notifying practitioners, contracted service providers, and data requesters.

The Determination contains its own commencement and an explicit note about the commencement table. Section 2 sets out the commencement regime: the whole instrument commences on the later of the day after registration and the day the National Occupational Respiratory Disease Registry Act 2023 commences, and it will not commence at all if the Act does not commence (s 2(1)). The commencement table as published includes an entry in Column 3 stating "22 May 2024 (paragraph (b) applies)". That suggests that, as originally made, the Act’s commencement event had occurred or was fixed such that the instrument’s operative date aligns with 22 May 2024; the instrument’s own note explains that the table relates only to the provisions as originally made and will not be amended to deal with later amendments of the instrument (s 2 note).

There are no amendment provisions within this Determination text and no later amendments are included in the material provided. The instrument’s introduction records the making of the Determination by Professor Paul Kelly, Commonwealth Chief Medical Officer, and it is dated 29 February 2024. The instrument explicitly states it is made under subsections 12(4) and 31(2) of the National Occupational Respiratory Disease Registry Act 2023 (s 3). The instrument includes its definitions and the operative parts prescribing minimum and additional notification information and fee methodology (Parts 1-3).

Because the Determination is subordinate legislation, any amendment history would appear in subsequent registered determinations, amending instruments or legislative registers. The Determination itself contains a cautionary note that the commencement table relates only to the instrument as originally made and will not be amended in the instrument text to reflect later amendments (s 2 note). The material provided does not include subsequent instruments, variations, or revocations.

Practical consequences of the recorded commencement approach

• The Determination delays operation until the parent Act is in force (s 2(1)), and the published table records that paragraph (b) applied with effect 22 May 2024. Where subordinate instruments depend on primary legislation, the instrument’s effective date is contingent on the Act coming into effect; the Determination preserves that contingency.

• The absence of amendment entries in the provided text means that, as at the date of the Determination, the specified data elements and fee method are the operative rules. Any later changes would require a new determination or an amending instrument made under the same Act powers.

What to look for in amendment history going forward

• Changes to the list of minimum or additional notification items, including additions or deletions of data fields (for example, adding new diagnostic tests or occupational categories).

• Alterations to consent thresholds or the mechanics for corrections and updates, which may be done to align with privacy practice or to respond to stakeholder feedback.

• Adjustments to the fee schedule or hourly rates in s 13(4), or expansion of the categories for which specific rates apply (the Determination currently fixes rates for research and State/Territory tailored reports only).

• Modifications to digital authentication requirements (for example, changes to how myGovID is referenced or alternative authentication channels).

• Any explicit cross-references to privacy or data-sharing agreements with states and territories, including formal memoranda of understanding.

In the absence of recorded amendments in the provided material, users should assume the Determination as published (29 February 2024) and effective as per the commencement table governs the Registry’s data content and the disclosure fee method until changed by a subsequent instrument.

The Determination text supplied contains no references to litigation, court decisions, or case law. There are no named judicial decisions in the instrument, nor are there references to litigation outcomes that have shaped the Determination. Because this is subordinate legislation (a determination made by the Commonwealth Chief Medical Officer under the Act, s 3), any litigation that engages its validity, interpretation or application would occur under general administrative law and statutory review pathways and would refer to the parent Act, the instrument-making power, procedural fairness and statutory interpretation principles.

What is present in the instrument and relevant to potential litigation

• Specific data prescriptions and the method for calculating disclosure fees (Parts 2 and 3). Disputes could arise over whether particular information falls within "minimum" or "additional" notification information as defined by the Determination and the Act, or whether a particular disclosure request is properly chargeable under the fee method in s 13.

• Cross-references to the Act’s correction, updating and disclosure provisions (notes referencing ss 15, 17, 21-22, 31). Potential litigation could concern the correctness of entries, the exercise of powers to correct or update records, or the lawfulness of disclosures under the Act.

• The requirement to include myGovID email for the notifying practitioner (s 9(2)(c)) and the inclusion of identifiers such as Medicare or healthcare identifiers (s 6(d)). Litigation might engage privacy law, the scope of information lawfully held by the Commonwealth, or the adequacy of notice and consent where those issues are contested.

Potential legal claims that could be expected, grounded in the Determination’s content (but not predicting outcomes)

• Administrative law challenges to the validity of the Determination could be mounted on grounds such as exceeding the statutory power given by the Act, failure to follow required processes when making the instrument, or unreasonableness in the terms of the Determination. Any such challenge would engage interpretation of the Act’s delegation of power under ss 12(4) and 31(2).

• Privacy or data-protection claims could arise against the Registry or contracted service providers if privacy principles are violated during collection, storage, use or disclosure, given the volume of sensitive health information and identifiers prescribed by the Determination. Affected individuals could seek remedies under privacy legislation or administrative law, depending on the legal basis available for challenge.

• Contractual or procurement disputes could occur between the Commonwealth and contracted service providers about the application of the fee method (s 13), the permissible tasks that attract hourly charging, or the number of hours charged. External requesters might also dispute fees charged for disclosure if they consider the hours claimed excessive.

• Disputes over the content or completeness of notifications: individuals or practitioners might challenge whether certain corrections or updates are permitted without consent (the Determination’s notes reference the Act’s consent rules in ss 15(5), 17(4)).

Absence of litigation history in the instrument is not indicative of absence of future litigation. The Determination, by prescribing specific data and fee mechanics, creates points at which litigation could arise , particularly at the intersection of privacy, administrative law and data-sharing. Users should monitor judicial decisions and administrative rulings that interpret the Act and this Determination for evolving legal standards.

This section highlights particular practical traps, friction points and implementation risks that arise directly from the Determination’s content and structure. Each item points to a specific provision in the Determination.

1. “If provided by the individual” caveats (multiple sections): Many data items are required only "if provided by the individual" (e.g. sex at s 6(c); Indigenous status, country of birth, languages, ss 6(f)-(h); total years of exposure s 7(2); many exposure detail fields in ss 7(3)-(4)). That means the Registry can end up with partial records. For analysts or regulators relying on completeness, absence of data will be common, and the Determination does not mandate practitioner-led verification beyond recording what was provided. Practitioners should note how to document refusals or unknowns to avoid data-quality disputes.

2. Mandatory telephone number but optional email (s 6(k)-(l)): Section 6(k) requires the individual's telephone number but section 6(l) only requires email "if provided by the individual". In practice, telephone numbers change and are less reliable for later contact or linkage than unique identifiers; this specific mix may complicate follow-up or re-contact strategies.

3. One-of identifiers requirement and linkage limitations (s 6(d)): The Determination requires at least one of healthcare identifier, Medicare number or DVA number (s 6(d)). If only a non-unique identifier is available or no identifier is provided, linkage across systems will be harder. The instrument does not mandate secure transfer or matching protocols; expect difficulties in epidemiological linkage and increased risk of duplicate records.

4. myGovID email requirement for notifying practitioner (s 9(2)(c)): Requiring the email used to access myGovID ties notifications to a digital identity method. Practically, some practitioners may not have a myGovID or may have issues with registration; this could delay notifications or require support for onboarding. It also raises questions about how authentication errors will be handled.

5. Silicosis CT report requirement (s 8(f)): For silicosis the Determination requires a copy of the CT report and the date of the scan (s 8(f)). Clinicians must have access to imaging reports and the ability to attach them to notifications; radiology services or practices that hold the report may need consent processes and transfer mechanisms. Missing reports could delay or prevent compliant notification.

6. Rounding-hours charging rule (s 13(3)): The fee rule requires rounding to the nearest hour, with half an hour rounded up. That works in favour of the provider where fractional hours are common and may create perceptible, aggregating costs for requesters where many small tasks are required. Requesters should anticipate that short tasks will be rounded up.

7. Narrow fee categories (s 13(4)): The Determination fixes hourly rates only for research ($49.50) and tailored State/Territory authority reports ($66.00). The instrument does not prescribe rates for other kinds of requesters. This can create uncertainty for commercial, legal or private-sector requesters, and shift negotiation into contracting or leave fees to be determined under the Act’s disclosure processes. Requesters should confirm applicable fees before making requests.

8. Employer identification risks (ss 7(3)(e), 7(4)(e), 12(2)(a)-(f)): Where exposure occurred in Australia, employer names and addresses are to be recorded. Practitioners must balance obtaining workplace details with privacy and consent constraints. Employers may be identified in the Registry without notice to them, which could create workplace relations or liability consequences. The Determination does not provide guidance about informing employers or how employer data will be handled.

9. Consent vs correction tension (notes to ss 6 and 11): The Determination requires recording whether an individual has consented to notification or to correction/updating of non-minor changes (notes referencing subsections 15(5) and 17(4) of the Act). Practitioners must distinguish minor or technical corrections from substantive ones and ensure the consent requirements are observed; the Determination does not define "minor or technical", leaving practitioners to the Act’s provisions and potentially to subjective judgement.

10. Data security and privacy not specified: The Determination prescribes collection of sensitive health information (lung function values, test reports) and identifiers but does not set out security or retention requirements. Those will be governed by the Act or separate Commonwealth privacy laws; however, practitioners and contracted service providers must be aware that data handling obligations exist and must be implemented operationally even if not spelled out here.

11. Multiple employers and exposures create complexity (s 12): The detailed occupational-history requirement (s 12) requires separate entries for each occupational position likely to have led to exposure. For individuals with long or varied careers, the notification burden can be substantial. Practitioners and patients may face recall bias and administrative delay in assembling complete histories.

12. Absence of fee cap or maximum (s 13): The fee method is time-based with specified hourly rates but no maximum payable. For large tailored reports or complex extraction tasks, the fee payable could be substantial. Requesters should budget for potentially open-ended charges and seek cost estimates in advance.

13. Treatment-cessation metadata requirement (s 9(2)(g)): The practitioner must record the date and reason for cessation if they stop treating the patient. Practitioners need to document and code reasons carefully; inconsistency in reasons could reduce utility for surveillance purposes.

14. Cross-jurisdictional exposures (s 7(3)(f), 7(4)(f)): The Determination records only that the last or main exposure occurred outside Australia if that is the case. It does not require detailed foreign employer/contact information. That limits the Registry’s ability to trace exposures that occurred overseas and may affect coverage for migrant workers or people who worked overseas.

Each of these points flows from the text of the Determination and should be considered when implementing notification workflows, designing consent forms, negotiating contracts for disclosure services, or procuring IT solutions for the Registry.

This section translates the Determination’s requirements into concrete steps and operational controls that prescribed medical practitioners, contracted service providers, Commonwealth administrators and requesters should follow to meet statutory obligations and reduce practical risks. Each step cites the relevant provision(s).

For prescribed medical practitioners and clinical teams

1. Ensure authorisation and myGovID access (s 9(2)(c)): Confirm that you are a "prescribed medical practitioner" under the Act and have a functioning myGovID account. Record the email used to access myGovID; notifications will include that email (s 9(2)(c)). If you lack myGovID access, arrange registration and test authentication before relying on the Registry’s notification portal.

2. Collect minimum notification information (ss 5-9): At diagnosis or treatment initiation for occupational respiratory disease, collect and record the minimum fields listed in Division 1: patient name, date of birth, at least one identifier (healthcare identifier, Medicare number, or DVA number, s 6(d)), date of diagnosis, disease name, tests used, whether a multidisciplinary team was consulted, lung function values and test dates if available (s 8(g)), exposure summary (total years, last and main exposure details, s 7), contact details including telephone number (s 6(k)) and postal address if resident in Australia (s 6(i)). Ensure the notifying practitioner’s name, work email, specialty, practice address, date patient became patient, and if treatment ceases, date and reason for cessation, are captured (s 9(2)(a), (b), (d)-(g)).

3. Gather consent metadata (s 6(m)-(n), s 11(1)(e)-(f)): Obtain and record whether the individual consents to notification of minimum and/or additional information and whether they consent to future correction/updating of such information where changes are non-minor. Record the date consent was given and any withdrawal dates. Maintain a copy of consent forms and an auditable record.

4. For silicosis, obtain CT report (s 8(f)): Where the diagnosis is silicosis, secure a copy of the computed tomography report used to diagnose the disease and the date the scan was performed. Make arrangements with radiology services for timely transfer of that report when notifying.

5. Compile occupational exposure history (ss 7, 12): For the last and main exposure and for each occupational position likely to have led to exposure, document industry and occupation, job title, dates/period employed, average weekly hours, whether the exposure was at the main workplace or another location, main and secondary agents, main job task, whether respiratory protective equipment was used and type, and ventilation and other control measures in place (s 12(2)(a)-(f)). Use structured templates to reduce missing fields and to standardise descriptions of PPE and ventilation.

6. Record medical tests and attach reports (s 11(2)): Document the type, date and results of relevant medical tests; attach reports where available. For lung-function measurements, include actual and predicted values and dates (s 8(g)).

7. Distinguish "if provided by the individual" fields (various): Where items are conditional on patient-provided information (e.g. sex provided by individual, languages spoken at home), record whether the item was asked and whether the patient declined or could not provide it. This avoids ambiguity between "not asked" and "asked but unknown".

8. Maintain data security and privacy compliance: Although not specified in the Determination, align data collection, storage, and transmission to the Registry with applicable Commonwealth privacy obligations, secure data-transfer protocols and institutional policies. Keep a log of disclosures and access to the patient’s Registry entry.

For contracted service providers and administrators

1. Implement the fee method and rounding (s 13): When preparing disclosures under ss 21-22 of the Act, calculate fees by multiplying the relevant hourly rate by total hours spent extracting and preparing data, and round total hours to the nearest hour with half an hour rounded up (s 13(2)-(3)). Use time-tracking tools to record extraction and preparation time with timestamps and task descriptions to support billing.

2. Use applicable rates (s 13(4)): Apply $49.50 per hour for disclosures to be used for research and $66.00 per hour for tailored reports for State or Territory authorities. For other request types, consult the Act’s disclosure provisions or contractual terms; obtain written confirmation of fee applicability before commencing work to avoid billing disputes.

3. Provide cost estimates to requesters: For tailored reports or research extractions that may take significant hours, issue written cost estimates and obtain written acceptance before starting. Include an itemised breakdown of tasks and anticipated hours.

4. Prepare secure data-transmission and de-identification processes: Ensure data is prepared securely, that any necessary de-identification or data minimisation required under the Act or privacy law is applied before disclosure, and that disclosures are logged and auditable.

For requesters of protected information

1. Determine the applicable disclosure pathway under the Act (ss 21-22 referenced in s 13): Confirm whether the request is research, a tailored State/Territory report, or another permissible purpose under the Act. The rate you will be charged depends on the classification (s 13(4)). Seek pre-approval or a Memorandum of Understanding with the Registry where relevant.

2. Budget for time-based fees and rounding (s 13(2)-(3)): Expect hours to be tracked and rounded; ask for estimates. For large projects, request periodic progress invoices so you can assess ongoing costs.

3. Provide precise, scoped requests: Narrowly scope the data required to reduce extraction hours , for example, limited date ranges, specific geographic areas, aggregated outputs rather than line-level data , and state whether de-identified or person-level data is required. This will reduce hours and fees.

Operational design and governance

1. Use standardised templates: Develop and deploy standard notification templates that mirror the Determination’s fields (ss 6-12). This reduces errors, improves data quality and speeds extraction.

2. Train clinicians and administrative staff: Provide training on which fields are mandatory, which are conditional, consent requirements and how to obtain and record consent dates and withdrawals (s 6(m)-(n), s 11(1)(e)-(f)). Include guidance on capturing occupational-history detail and test reports.

3. Audit trails and documentation: Maintain logs for notifications, corrections, withdrawals of consent, disclosure requests and fees charged (including hours claimed and rounding computations). These records will support administrative or legal challenges and contract audits.

4. Data linkage and identifiers: When possible, collect the healthcare identifier or Medicare number (s 6(d)) to enable reliable linkage; document efforts to obtain these identifiers and the outcome. Where not provided, record the alternative identifiers used.

5. Engage with State/Territory authorities early: For tailored reports or cross-jurisdictional analyses, set up early data-sharing agreements or MOUs to settle scope, timing and cost allocation, given the Determination’s specific tailored-report hourly rate (s 13(4)(b)).

6. Privacy impact assessments: Conduct privacy impact assessments consistent with Commonwealth privacy expectations for the Registry’s collection and disclosure of sensitive health information and identifiers, and document mitigation measures (encryption, access controls, retention policies).

7. Manage employer-data sensitivities: Where employer details are recorded (ss 7, 12), establish internal policies on use, redaction and notification to employers if required by other laws or by organisational policy. Keep records of whether employer details were patient-provided or practitioner-ascertained.

8. Correction and update workflows: Implement a clear workflow for corrections and updates consistent with the Act’s rules (notes referencing subsections 15(4), 15(5), 17(3), 17(4)). Ensure consent procedures are applied for non-minor corrections and that audit logs are maintained.

In sum, compliance requires integrating the Determination’s data fields into clinical workflows, deploying authentication via myGovID, collecting and recording consent and identifiers, managing attachments (CT reports, test reports), tracking disclosure work hours, and implementing privacy-preserving disclosure practices. Advance planning on cost estimation and contractual terms for disclosures will reduce disputes and procedural delay.