Stirling Griff (SA, Centre Alliance) Share this | Hansard source

My question is to Minister Cash, representing the Minister for Health. I refer the minister to Monday's ANAO report into My Health Record. This report stated that shared cybersecurity and privacy risks were not properly managed by the Digital Health Agency and had to be improved. It further stated that the last privacy risk assessment was undertaken in 2017, despite the Digital Health Agency providing funding to the Australian Information Commissioner to conduct at least four privacy reviews between October 2017 and June this year. Minister, why were these Digital Health Agency pre-funded risk assessments not undertaken?