Key points
- Greater Melbourne counted 4,917,750 people at the 2021 Census, and a language other than English is used in 37.7% of its households.1
- Victoria's Health Records Act lets a clinic send health information outside the state only on listed grounds, and bars deleting it until 7 years after the last service or the patient turns 25.2
- The Health Complaints Commissioner helps resolve complaints about health information held in Victoria's public and private sectors.3
- Ahpra expects informed consent before a generative AI scribe records, and the OAIC applies the Privacy Act to everything typed into an AI tool and everything it produces.56
Summary
A Melbourne clinic can run AI in the consult room and at the front desk under Victoria's Health Records Act, as long as the patient consents before recording, the doctor signs every note and records stay where the Act expects. wai is set up that way with each clinic, with records hosted in Australia and a person approving every draft.
Melbourne clinics that use AI well send the GP home with every note signed, and patients who write after hours find a reply waiting in the morning. Victoria adds its own health privacy and recording laws to the federal Privacy Act.
Part of the NSQHS and RACGP hub, with the framework explained, a readiness checklist and 8 guides.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoWatch a Box Hill family's late-evening booking request turn into a reply your receptionist approves and an Australian dollar deposit, in a fifteen-minute session.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| Ahpra and the National Boards | Informed consent for generative AI scribes, consent as the first step before recording | Does the workflow start with consent | Consent recorded at the start of each consult |
| Health Records Act 2001, HPP 9 | Health information leaves Victoria only on listed grounds | Which state and country hold every copy | Records hosted in Australia, set up with your clinic |
| Health Records Act 2001, HPP 4.2 | No deletion until 7 years after last service, or age 25 | Can retention be set to the Victorian periods | Retention agreed with the clinic at setup |
| Surveillance Devices Act 1999, s6 and s11 | Consent of each party to record or pass on a private conversation | Who hears the recording, and where does it go | AI drafts, the GP reviews and signs, every step logged |
| Health Complaints Commissioner | Resolves complaints about handling of health information | Can the clinic show who did what, and when | Every message, draft, approval and signature logged and exportable |
| OAIC, guidance on commercially available AI | Privacy Act applies to AI inputs and outputs | Is patient data used to train models | Patient data never used to train models |
The private care market in Melbourne
The 2021 Census counted 4,917,750 people in Greater Melbourne, with a median age of 37.1 Of them, 59.9% were born in Australia, 242,635 in India and 166,023 in mainland China.1
A booking page that offers the earliest open time, and a reply sent the evening a patient writes, keep each new patient with the practice they chose.
The rules a clinic in Melbourne works under
Practitioners are registered through Ahpra. Its guidance says a generative AI scribe will generally need the patient's informed consent, warns of possible criminal consequences if consent is not obtained before recording, and asks that transcription software make explicit consent its first step.5
Victoria's Health Records Act 2001 protects health information held in both the public and private sectors, and the Health Complaints Commissioner helps resolve complaints about how it is handled.3 HPP 1 lets a clinic collect health information only when it is necessary for its functions and, in most cases, with the patient's consent.2 HPP 9 allows health information to leave Victoria only on listed grounds, such as a recipient bound by substantially similar principles or the patient's consent.2 HPP 4.2 bars a provider from deleting it until 7 years after the last service, or until a patient seen as a child turns 25, whichever is later.2
Recording has its own statute. Section 6 of the Surveillance Devices Act 1999 makes it an offence to knowingly overhear or record, by a listening device, a private conversation someone is not party to without the consent of each party, and section 11 restricts passing on a record of a private conversation without that consent, with penalties of up to 2 years' imprisonment.4
Federally, the OAIC's guidance on commercially available AI products says privacy obligations apply to personal information entered into an AI system and to output that contains it, and recommends that sensitive information not be entered into publicly available generative AI tools.6 My Health Record lets a registered provider view or add a patient's diagnoses, medicines and allergies within its access controls.7 wai is built to connect to My Health Record. We set up your clinic's connection with you.
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Melbourne. Every note stays a draft until the GP signs it, and every message waits for a person at the clinic to approve it.
The languages Melbourne patients write in
The 2021 Census found 61.1% of Greater Melbourne residents use only English at home. The most common other languages were Mandarin at 4.3% (212,680 people), Vietnamese at 2.3%, Greek at 2.1%, Punjabi at 2.0% and Arabic at 1.8%.1
wai works in any language.8 Bring a week of real messages to the demo, in the languages your patients used, and judge each draft yourself.
What a demo shows in Melbourne
At 9.40pm a daughter in Box Hill emails a Camberwell practice asking for a skin check for her father before the end of the month. wai files it in the family's thread, reads the GP's busy times from Google Calendar, Outlook or Apple Calendar, and drafts a reply with two open times. The receptionist approves it at 8.15, and the booking link takes a deposit in Australian dollars through the clinic's own Stripe account.
A call missed from a Footscray number during the morning rush becomes a drafted text the front desk approves. In the consult, the GP reads the consent line, the note is drafted while the GP talks, and the GP edits and signs it. A referral letter is ready to sign before the next patient, and the father's results and letters reach his wai Profile.
For health services, governments and insurers in Victoria
Victorian health services, hospital operators and health insurers can have wai build them a system around one care pathway, hosted in Australia, with each clinical output signed by a clinician and data and model rights written into the contract. The approach is on the organisations page.
Where to start
First, put the consent step at the start of every recorded consult, using the consent form template, and note the patient's answer in the record.5 Second, confirm in writing where every copy of the data sits, so HPP 9 is answered before go-live.2
Third, set retention to HPP 4.2 and update your privacy policy to describe the AI tools you use.26 Fourth, export a month of enquiries by channel and hour, and bring it to a fifteen-minute demo.
Bring a month of your after-hours enquiries and missed calls. We show the replies your team would approve and the diary they would fill.
Frequently asked questions
Can a Melbourne clinic store patient records in Sydney?
Only on an HPP 9 ground, because the Victorian Act restricts transfers to anyone outside Victoria, such as a recipient bound by substantially similar principles or the patient's consent.2
How long must a Victorian clinic keep health records?
HPP 4.2 bars deletion until 7 years after the last service, or until a patient seen as a child turns 25, whichever is later.2
Must a Melbourne GP ask before an AI scribe starts recording?
Ahpra says a generative AI scribe will generally need informed consent and that the software should make explicit consent its first step.5
Who handles complaints about health information in Victoria?
The Health Complaints Commissioner helps resolve them under the Health Records Act 2001, which covers both public and private sector organisations.3
Can patients pay a deposit when they book?
Yes. wai takes a deposit at booking, and card payments run through the clinic's own Stripe account in Australian dollars, with the clinic as merchant of record.
Can wai send a message to a patient without the team?
No. Each message is drafted for the team, a person at the practice approves it before it leaves, and clinical questions are routed to a GP.
Sources
- 1Australian Bureau of Statistics, 20222021 Census QuickStats, Greater Melbourne (2GMEL)Read 15 October 2026Read source
- 2Victorian Legislation, Chief Parliamentary Counsel, 2026Health Records Act 2001, authorised version 050, Schedule 1 HPP 4.2 and HPP 9Read 15 October 2026Read source
- 3Health Complaints Commissioner, Victoria, 2026Reporting privacy breaches or incidents to the HCCRead 15 October 2026Read source
- 4Victorian Legislation, Chief Parliamentary Counsel, 2025Surveillance Devices Act 1999, authorised version 048, sections 6 and 11Read 15 October 2026Read source
- 5Ahpra and National Boards, 2024Meeting your professional obligations when using Artificial Intelligence in healthcareRead 15 October 2026Read source
- 6Office of the Australian Information Commissioner, 2024Guidance on privacy and the use of commercially available AI productsRead 15 October 2026Read source
- 7Office of the Australian Information Commissioner, 2026My Health Record, guidance for health service providersRead 15 October 2026Read source
- 8wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
Every Melbourne enquiry answered, every consult note signed by evening.
Fifteen minutes on your own messages and diary with a clinician who works in wai daily. You will hear back within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits