Technology has become central to how healthcare practices operate. From managing patient records and clinical software to emerging AI tools, digital technology plays a vital role in daily practice operations and patient care.
But with greater reliance on technology comes greater responsibility. Practices need to understand how their systems are managed, how patient information is protected and what happens when technology fails.
The RACGP 6th edition Standards for general practices, released in August 2026, bring renewed attention to these areas, introducing updated expectations around digital health governance, AI and clinical risk management.
As governance expectations increase, is your practice’s IT environment ready to meet them?
While the formal transition timetable is still being confirmed, now is a good time to assess your practice’s readiness. We explore five key IT areas to focus on and the practical steps you can take ahead of the updated Standards.
What’s Changed in the RACGP 6th Edition Standards?
The RACGP Standards for general practices outline what Australian GP practices need to have in place to deliver safe, high-quality patient care. Developed by the Royal Australian College of General Practitioners, they cover everything from clinical care and patient safety to practice management, governance and continuous improvement.
To achieve accreditation, practices undergo an independent assessment against these Standards. Beyond demonstrating a commitment to quality care, accreditation also supports eligibility for certain government incentive programs, making it an important consideration for practice owners and managers.
The 6th edition marks the first major revision since 2017, building on the previous framework rather than starting from scratch. Existing requirements have been retained, reorganised or strengthened, while new criteria address emerging healthcare priorities and risks. The framework is now organised into four main standards: Foundations of General Practice, Clinical Governance, Patient Participation and Continuous Quality Improvement.
Several of these changes affect the IT requirements for RACGP accreditation, particularly around digital health governance, information security and risk management.
5 IT Requirements to Review for RACGP Accreditation
Outlined below are five key IT areas affected by the updated Standards, what has changed and what your practice should review.
1. Digital Health Technology Governance
As practices adopt more digital technologies, having clear responsibility for how they’re managed becomes increasingly important.
The 6th edition introduces a new criterion, Governance of Digital Health Technologies, placing greater emphasis on how practices oversee and manage these systems.
This means understanding which digital health technologies your practice uses, who is responsible for them and how associated risks are identified and managed.
2. AI Governance and Monitoring
AI tools are increasingly being used for clinical documentation, administrative tasks and everyday practice operations. However, their use introduces considerations around patient privacy, information security and clinical safety.
The 6th edition introduces two new criteria, Safe and Accountable Use of AI and Evaluation and Monitoring of AI Use, establishing clearer expectations for AI oversight.
Practices should identify which AI tools staff are using, understand what information they access and establish processes for approval, monitoring and risk management.
3. Document Control and Version Management
Keeping policies and procedures up to date is essential for consistent practice operations and demonstrating compliance.
The 6th edition introduces a new criterion, Document Control and Version Management, emphasising the importance of maintaining accurate, accessible and up-to-date policies and procedures.
Practices should review how documents are stored, updated and approved, ensuring staff can access the latest versions and that changes are properly recorded.
4. Clinical Risk Management
Technology failures can have direct consequences for patient care. System outages, inaccessible clinical records or disrupted communications can affect a practice’s ability to deliver services safely.
The 6th edition introduces a new criterion, Clinical Risk Management System, and expands the existing Incident and Near Miss Management requirements.
Practices should consider technology-related risks within their wider clinical risk management processes, including how incidents are reported, managed and reviewed.
5. Clinical Information Systems and Secure Connectivity
Clinical information systems support everything from patient consultations and recordkeeping to secure information sharing between healthcare providers.
The 6th edition expands existing criteria covering Digital Clinical Information Systems, ICT Continuity, Recovery and Cyber security, and Digital Governance and ICT security, reinforcing the importance of secure, reliable access to clinical information.
Practices should review their clinical software, access controls, cyber security arrangements and plans for managing system disruptions. Where relevant, this should include My Health Record connectivity and NASH PKI certificate management.
When Will the RACGP 6th Edition Standards Take Effect?
Although the RACGP released the 6th edition Standards on 26 August 2026, the formal transition arrangements for accreditation are still being finalised by the Australian Commission on Safety and Quality in Health Care.
For now, practices continue to be assessed against the 5th edition Standards. However, the release of the updated framework gives practice owners and managers an opportunity to review what’s changed and identify any gaps before the new requirements become part of accreditation assessments.
How Can Your Practice Prepare for the RACGP 6th Edition?
Preparing for the new changes starts with understanding where your practice stands today, taking a closer look at your existing technology, policies and processes. Use this short RACGP accreditation preparation checklist to identify areas that may need attention:
- Do we know which digital systems our practice relies on and who is responsible for managing them?
- Are our IT policies, procedures and security measures documented and up to date?
- Do we have reliable backups and a clear plan for restoring essential systems if something goes wrong?
- Are we aware of which AI tools our staff use and how they’re being managed?
- Can we demonstrate how technology-related risks and incidents are identified, managed and reviewed?
If you’re unsure about any of these questions, a more detailed IT review can help identify gaps and prioritise improvements ahead of the transition.
Prepare for the RACGP 6th Edition with BITS
Preparing for RACGP accreditation takes more than general IT support. Your technology partner needs to understand the clinical systems, digital health requirements and compliance responsibilities that underpin patient care.
At BITS, we combine healthcare IT expertise with ISO 27001-certified information security practices to help practices across Brisbane, the Gold Coast and South East Queensland prepare for RACGP accreditation.From supporting clinical platforms like Best Practice and MedicalDirector to navigating My Health Record connectivity, NASH PKI and PIP QI requirements, our team understands the complexities of healthcare IT and how to support your practice’s compliance needs.
Not sure where your practice stands? Book a free 20-minute consultation with our healthcare IT specialists to discuss your current environment, identify potential gaps and plan your next steps.
FAQs
What are the new IT requirements under the RACGP 6th edition?
The RACGP 6th edition introduces new criteria for digital health governance, AI oversight and document control. It also expands existing requirements for cyber security, clinical information systems and incident management, alongside a new clinical risk management criterion.
Do general practices need an AI governance policy under the RACGP 6th edition?
The 6th edition requires practices to demonstrate appropriate governance and oversight of AI use. A documented policy can help meet these expectations by outlining approved tools, staff responsibilities, patient privacy safeguards and processes for monitoring AI-related risks.
What is digital health technology governance under the RACGP 6th edition?
Digital health technology governance involves overseeing how your practice selects, manages and reviews its digital systems. The RACGP 6th edition introduces a dedicated criterion covering this area, emphasising clear responsibilities, risk management and ongoing oversight of technologies supporting patient care.
Does the RACGP 6th edition include requirements for My Health Record and NASH PKI?
The 6th edition includes requirements for secure clinical information systems and digital health governance. While My Health Record and NASH PKI aren’t identified as new standalone criteria, practices should review relevant connectivity, certificate management and access controls.
Is RACGP accreditation mandatory for general practices in Australia?
No, RACGP accreditation is not a legal requirement for every general practice in Australia. However, accreditation is required to access certain government incentive programs and helps demonstrate a practice’s commitment to nationally recognised quality and patient safety standards.
Can my current IT provider support RACGP 6th edition accreditation requirements?
It depends on their experience with healthcare-specific technology and compliance requirements. Your IT provider should understand clinical software, digital health governance, cybersecurity and RACGP Standards to help identify potential gaps and support your practice’s accreditation preparation.