Protecting health information privacy in research: how much law do Australians need?

Privacy regulation in Australia, whether by federal or state legislation or other means, has provoked complaints from researchers. Its scope depends on defining the information it covers, the organisations it governs and the principles it applies. Regulation is inconsistent, and compliance can be complex (as illustrated by a hypothetical research example). National reform to achieve a realistic, balanced, publicly acceptable and consistent regulation is urgently needed, and has been recognised and recommended by recent reviews of the Commonwealth Privacy Act 1988 (Cwlth) by the Office of the Federal Privacy Commissioner and the Australian Senate.