3. My Health Account new feature - health consumers confirm who they are using healthcare provider

My Health Account new feature How a health consumer can confirm their identity using details held by their healthcare provider

To be released in February 2022

Step 1: Health consumer selects that they want to confirm who they are using their healthcare provider

Step 2: They consent for the information held by their general practice team to be used to confirm their identity

Step 3: They search for and select their enrolled general practice using a type-ahead search. Once selected, all of that general practice team’s details are displayed so the user knows they have chosen the correct one.

Step 4: The user enters their personal details, which is used to search for their NHI

Step 5: Once the NHI number is matched, their mobile phone number is retrieved from the NES records of that practice and the last four digits displayed (so they can identify if they still have that mobile phone number).

Step 6a: If the phone number is correct, a six-digit code is sent to the mobile phone

Step 7a: The person enters the six-digit code into My Health Account, then the person is able to successfully confirm who they are and are either redirected back to My Covid Record or to their My Health Account landing page.

Step 6b: If the number displayed on the screen is wrong (they do not hold that mobile phone number), they can click on the “My number is wrong" button on the bottom left of the screen

Step 7b: The person then gets a message asking them to contact their general practice team to update their contact details before continuing with the process to set up their account

Step 8b: The person updates their details with their general practice team • Once the person verifies their identity and updates their details with their General Practice, they can return to My Health Account and go through the process again to set up their new account.

• They follow the same steps. Once they confirm the phone number is correct, a six-digit code is sent to the phone.

• The person enters the six-digit code into My Health Account, then the person is able to successfully confirm who they are and are either redirected back to My Covid Record or to their My Health Account landing page.

• Note: a person only gets three attempts to confirm who they are using their healthcare provider. If they exhaust the three attempts, they can contact frontline staff to reset their attempts.