The RACGP Standards (4th Edition  Criterion 4.2.1 Confidentiality and privacy of health information - page 93-96) indicate that  "As well as being familiar with the Federal Privacy Act and National Privacy Principles, practices need to be familiar with the relevant state/territory privacy legislation".

Also, on page 95:

Transfer of health information:  The correct process for transferring patient health information to others, such as other health service providers or in response to third party requests, is outlined in section 2 ‘Use and Disclosure’ in the OFPC Guidelines on Privacy in the Private Health Sector. Practices are advised to contact their insurers if they have any concerns about third party requests for the transfer of patient health information.

See also the Victorian Office of the Health Services Commissioner: http://www.health.vic.gov.au/hsc/patient/access.htm

This indicates that:

From 1 July 2002, Section 25 and Health Privacy Principle 6 of the Health Records Act 2001 gives you a right of access to personal health information held about you by any organisation in the private sector in Victoria.

In addition you have a right as of 21 December 2001, under National Privacy Principle 6 of the Commonwealth Privacy Act 1988.   For more information about this right, contact the Federal Privacy Commissioner on 1300 363 992 (TTY: 1800 620 241) or visit the website at:  www.privacy.gov.au

Personal health information means health information which either identifies you specifically or from which it is reasonably likely your identity can be worked out.