Evaluating the Contextual Integrity of Australia's My Health Record.

My Health Record (MyHR) is Australia's national personally-controlled electronic health record. Initially established in 2012, it moved from an opt-in to an opt-out system in 2018. This paper considers the privacy aspects of MyHR shared health summary. Drawing on Nissenbaum's theory of privacy as contextual integrity, we argue that the shift in the event-specific nature of information sharing leads to MyHR breaching contextual integrity. As per Nissenbaum's decision heuristic for contextual integrity, we evaluate this breach through a reflection on the changing nature of health care, including patient empowerment, and the greater complexity of care. It is evident that more needs to be known about the benefits of shared health summaries, as well as the actual use of MyHR by clinicians and patients. Though we focus on MyHR, this evaluation has broader applicability to other national electronic health records and electronic shared health summaries.