Australian privacy obligations are not HIPAA
Most healthcare data security material is written for a US audience and quietly assumes US instruments. The Australian Privacy Act, the My Health Records Act and OAIC guidance impose different obligations on anyone handling health information here - and the difference matters most at exactly the point AI is introduced.