THE COVENANT THAT PREDATES THE INTERNET.

There is a particular kind of public trust that only health systems generate. It is not the diffuse trust of a tax office or the transactional trust of a licensing body. It is intimate, urgent, and acutely personal. When a person presents to a Queensland public hospital — at three in the morning, disoriented, frightened — they are placing something irreplaceable into the hands of a system they have never individually audited. They trust that the name above the door means what it says. They trust that the people inside are who they present themselves to be. They trust that the records held about them are accurate, accessible, and protected. This is not blind faith. It is a covenant, one built across more than a century of accumulated public commitment.

The Queensland Government was the first state government in Australia to introduce free, universal public hospital treatment, doing so in 1946 — a policy that was later adopted by other states and territories. That act of policy was foundational. It established something beyond a health system: it established a promise, encoded in law and practice, that public healthcare in Queensland would be universal and free of financial barriers at the point of care. Free access became a sacred cow in Queensland, unlike the other Australian states where charges were introduced in the 1950s and 1960s. That distinctiveness was not merely administrative. It shaped a particular civic relationship between the Queensland state and its people — one in which the health system occupied a category of institution closer to infrastructure than service, closer to a right than a product.

Queensland Health is the department of the state government responsible for the administration of the public health system, overseen by the Minister for Health and Ambulance Services and the Director-General. It comprises sixteen statutory Hospital and Health Services (HHS), the Department of Health, and Queensland Ambulance Service. Public health services in Queensland are provided through these sixteen Hospital and Health Services, each constituted as a statutory body governed by a Hospital and Health Board. The organisation employs over 130,000 people state-wide, operates on an annual budget exceeding $28 billion, and at the end of June 2024 maintained 13,810 beds across its network. By any measure, this is among the largest and most complex civilian organisations in the country.

The question this article examines is not whether Queensland Health performs its clinical function — that is a separate and important inquiry. The question here is what it means, in the digital era, to maintain the infrastructure of public trust on which all of that clinical function ultimately depends. What does it mean for an institution of this scale and civic weight to have a stable, sovereign, legible identity in the online world? And what happens when that identity is fragile?

THE LAYERED HISTORY OF A SOVEREIGN INSTITUTION.

Queensland Health’s formal administrative history reaches back well before its current name. The Queensland Department of Health was established in 1963 as a standalone department; its predecessor, the Health and Home Affairs Department, had operated from 1935 and held responsibilities spanning health, welfare, justice, and immigration services. In 2011, new legislation significantly shifted the role of the Queensland government in health, transferring responsibility for the delivery of public health services to statutory authorities. In 2012, the Queensland Department of Health was renamed Queensland Health.

That restructuring was itself a response to institutional stress. The 2011 legislation saw responsibility for delivering public health services transferred from government departments to statutory authorities. The 2011 National Health Reform Agreement, signed by all states and territories, required the creation of local health boards and hospital networks. In May 2012, this was formalised in Queensland through legislation that transitioned the health districts to independent Hospital and Health Service entities, each with their own board to manage and oversee health operations. The boards became accountable to the Minister for Health, and the Department of Health was established as a system manager. These changes became effective on 1 July 2012.

Each of these structural moments — 1935, 1946, 1963, 2011, 2012 — reflects not just administrative reorganisation but a renegotiation of the terms of the public health covenant. The institution has been rebuilt, renamed, and restructured repeatedly. Through all of it, the underlying promise has remained: that Queensland’s public health system exists as a permanent civic institution, not a temporary service arrangement. That permanence is the precondition of public trust.

Major tertiary centres such as Royal Brisbane and Women’s Hospital, Princess Alexandra Hospital, Gold Coast University Hospital, and Cairns Hospital handle complex cases including intensive care and specialised surgery. These are not just hospitals. They are civic anchors — named institutions that generations of Queenslanders have navigated to in moments of extremity. Their names carry weight precisely because they carry continuity.

WHEN DIGITAL INFRASTRUCTURE BECAME CLINICAL INFRASTRUCTURE.

The relationship between Queensland Health and its digital systems is no longer incidental. The Department of Health provides corporate support including payroll, finance, information technology, and procurement, and provides clinical governance over the health system’s operations. eHealth Queensland enables the delivery of health services to the community, supporting the information technology needs of the state’s sixteen Hospital and Health Services and the Department of Health.

Queensland Health’s digital transformation agenda, guided by the Digital Health 2031 strategy, is focused on empowering consumers to manage their healthcare, connecting the workforce with insights and tools to enable smarter care delivery, enabling equitable and accessible care closer to home, and supporting the health system to sustainably meet the needs of a growing population. The ambition is substantial. Queensland is at the forefront of the digital hospital agenda in Australia, with the integrated electronic medical record (ieMR) supporting Queensland Health’s Digital Health 2031 strategic vision as part of an ambitious agenda to transition to a world-class, digitally-enabled health system.

The tools of this transformation are already embedded in clinical practice. The integrated electronic medical record (ieMR) replaces paper-based clinical charts, allowing healthcare professionals to simultaneously access and update patient information. The Viewer collates data from multiple Queensland Health systems, enabling healthcare professionals including general practitioners to access patients’ information quickly. Telehealth is transforming care for rural and remote patients, enabling them to attend appointments close to home.

Queensland Health actively participates in national digital health initiatives and leverages national infrastructure to facilitate the seamless flow of patients through the health system. National digital infrastructure underpins several of Queensland Health’s digital health initiatives, including national healthcare identifiers for reliably and consistently identifying individual patients, healthcare providers, and healthcare organisations.

This convergence of the clinical and the computational is not merely a matter of administrative efficiency. It is a reconfiguration of the health covenant itself. The person who presents at a Queensland hospital now enters a system in which their identity, their history, and the authorisations governing their care are all digitally mediated. The integrity of that digital mediation is, therefore, not separable from the integrity of the care.

THE LESSONS OF CATASTROPHIC DIGITAL FAILURE.

Queensland Health’s relationship with digital infrastructure has not been without serious rupture. The 2010 payroll system failure remains one of the most instructive case studies in public sector technology governance in Australian history — and its lessons have direct bearing on the question of institutional digital identity.

The 2010 Queensland Health payroll system implementation was a disastrous payroll and HR system replacement project. The new payroll system was delivered by IBM based on SAP and Workbrain technology, replacing the former LATTICE payroll system. The new system went live on 14 March 2010 despite known issues with the system and incomplete testing. Almost 78,000 Queensland Health staff received inaccurate pay, or no pay at all, for a number of months due to serious system defects. These defects, delays, and other issues resulted in the total end-of-project cost being $181 million, with an estimated ongoing cost to repair, maintain, and operate the system of around $1.2 billion over eight years.

The payroll system implementation disaster at Queensland Health in 2010 is said to be the most spectacular technology project failure in the Southern Hemisphere and arguably the second worst failure of public administration in Australia’s history. The formal inquiry did not mince words. On 14 March 2010, after ten aborted attempts to deliver the new payroll system, it went live. It was a catastrophic failure. The system did not perform adequately with terrible consequences for the employees of Queensland Health and equally serious financial consequences for the state. After many months of anguished activity during which employees endured hardship and uncertainty, a functioning payroll system was developed — but at great cost.

Initiated in 2007 with the aim of replacing the obsolete LATTICE payroll system, the project was marred by unrealistic timelines, inadequate planning, fragmented governance, and a critical underestimation of complexity. Initially budgeted at approximately $6 million, the overall cost spiralled to over $1.2 billion over the subsequent eight years. At its nadir, over 78,000 employees experienced pay disruptions, ranging from underpayments to complete omissions. The root causes spanned poor stakeholder engagement, a failure to articulate and manage scope, substandard testing and risk mitigation, and a governance model with diffused accountability.

The deeper lesson is not about project management failure, though it was that. It is about the consequences of treating digital infrastructure as a procurement exercise rather than as a sovereign responsibility. When a public institution of Queensland Health’s size and civic weight outsources the design, implementation, and governance of its critical systems to external vendors without adequate oversight, it is not just risking administrative dysfunction. It is risking the terms of its social covenant. The 78,000 workers who went unpaid or underpaid were not merely experiencing administrative inconvenience. They were experiencing the collapse of an institutional promise — and that collapse eroded, however temporarily, the trust that the entire system depends on.

THE CURRENT DIGITAL THREAT LANDSCAPE.

The lessons of the payroll disaster were, to an extent, absorbed. But the digital threat environment facing Queensland Health today is qualitatively different from the governance failures of 2010. The Annual Cyber Threat Report 2023–24 from the Australian Cyber Security Centre identified health as one of the five sectors most vulnerable to cyber security incidents. Due to the nature of the personal information health entities hold, they are valuable targets for cyber criminals.

The Queensland Audit Office’s Health 2024 report — published in January 2025 — made findings that deserve serious attention. The identified deficiencies indicate a need to strengthen controls to manage cyber security risks and prevent inappropriate access to the information the entities hold. In the year under review, four significant deficiencies were reported — one new, two remaining unresolved from prior years, and one previously reported deficiency upgraded to significant — along with thirty-five additional deficiencies.

It is critical that the department addresses the weaknesses in its information systems controls. In addition to its own systems, it is responsible for supporting the information technology needs of the sixteen Hospital and Health Services. The impact of a successful cyber attack on the hospitals could be major and wide-ranging.

The number of control deficiencies found by the audit rose to 13, compared to seven reported the prior year. Six of the deficiencies related to a failure to remove user access for terminated staff or unused accounts in a timely manner, while three were related to poor password controls.

The subsequent Health 2025 report from the Queensland Audit Office confirmed that the challenges persisted. Health sector entities’ financial statements are reliable and their internal controls are generally effective. However, the Office continues to find deficiencies in information technology access and security controls. Health entities are considered attractive targets by cyber criminals due to the personal information they hold and the potential for profit. These access control deficiencies are considered significant. While management is working to address these complex issues, more timely action is required to resolve the deficiencies.

This is the context in which the question of digital institutional identity is not abstract. The Australian Cyber Security Centre identified health as one of the five sectors most vulnerable to cyber security incidents. Due to the nature of the personal information health entities hold, they are valuable targets for cyber criminals. Successful cyber attacks can occur because of weaknesses in an entity’s information technology control environment. The human consequences of a successful attack on Queensland Health’s systems are not theoretical. They encompass delayed care, compromised clinical decisions, exposed patient records, and the degradation of the institutional trust on which people depend when they are most vulnerable.

IDENTITY AS INFRASTRUCTURE.

There is a dimension of digital infrastructure that sits upstream of cybersecurity protocols, payroll systems, and electronic medical records. It is the question of institutional identity itself: how a public institution presents its authoritative digital self to the world, and how that self is verified, anchored, and protected against impersonation, confusion, or erosion.

In the current internet architecture, Queensland Health’s online identity depends on domain registrations leased from global commercial registrars operating under the authority of ICANN, renewed on annual or multi-year cycles, and subject — in principle — to the same commercial pressures and administrative vulnerabilities as any other domain holder. The address health.qld.gov.au operates within the gov.au namespace, which provides a meaningful level of institutional authentication. But the broader ecosystem in which Queensland Health communicates — including the digital identities of its sixteen Hospital and Health Services, its associated foundations, its research partners, and its community-facing programs — is more fragmented and more vulnerable to the slow erosions of digital administrative neglect.

Phishing attacks against healthcare systems rely, at their core, on identity ambiguity. An email purporting to come from a Queensland hospital, or a website resembling a Queensland Health service, is dangerous precisely because the authentic digital identity of those services is not visibly permanent, not cryptographically rooted, and not self-evidently distinguished from imitation. Health entities are considered attractive targets by cyber criminals due to the personal information they hold and the potential for profit. The most sophisticated technical defence against this threat is not merely password controls or multi-factor authentication. It is the legibility and permanence of institutional identity itself.

This is where the logic of a sovereign digital namespace becomes relevant to Queensland Health — not as a technology product, but as a civic proposition. If the addresses through which Queensland’s public health system presents itself to citizens are sovereign, permanent, and anchored to the state’s own identity layer, they become a form of public infrastructure in the same way that a named hospital building is infrastructure: not owned by a commercial entity, not subject to expiration, not transferable to another party. queenslandhealth.qld · royalbrisbane.queensland · goldcoasthospital.queensland — these kinds of addresses, registered under Queensland’s own top-level domains, would carry a form of institutional authority that no commercial domain registration can replicate.

Queensland Health, through its digital health strategic vision, has set a strong foundation for digitally-enabled healthcare that better connects consumers with their health information and enables them to be a more active partner in their care, unlocks channels for health system access and engagement, and supports better decision-making and proactive care by providing clinicians meaningful insights. That strategic vision presupposes the integrity of the digital environment in which those connections are made. Sovereign namespace is part of making that integrity structural rather than aspirational.

SCALE, GEOGRAPHY, AND THE CHALLENGE OF DIGITAL LEGIBILITY.

Queensland is the second-largest Australian state by land area, and its population is among the most geographically dispersed. Queensland Health needs to ensure that adequate healthcare services can be provided in the most remote parts of the state, which has a population spread across an area of 1.85 million square kilometres. Every day, the organisation provides hospital services to approximately 40,000 people and is responsible for approximately 85,000 employees across 300 sites.

Since the 2008 restructuring, the fifteen health service districts of Queensland Health have consisted of Central Queensland, Townsville, Mackay, Cairns and Hinterland, Torres and Cape, Central West, South West, Darling Downs, Sunshine Coast, Metro South, Metro North, Gold Coast, North West, West Moreton, and Wide Bay. Each of these services has its own institutional identity, its own community relationships, its own workforce, and its own digital presence. The challenge of maintaining a coherent, legible, and trustworthy digital identity across this scale and variety is not trivial.

Queensland Health’s Digital Health 2031 strategy states that over the next decade the health system will move from digital ready to digital by default, and that rural and remote communities must be supported to ensure they are not left behind by ongoing advances. Ultimately, health officials envision a future of rural and remote healthcare where patients are at the centre of the ecosystem, enabled and empowered through digital interactions across the continuum of care.

That ambition is admirable. But “digital by default” is only an unambiguous improvement if the default digital environment is one that citizens can trust and navigate with confidence. In a state as geographically vast as Queensland, where a patient in Mount Isa or Weipa may rely on telehealth for access to specialist care that metropolitan Queenslanders receive in person, the authenticity and stability of the digital interface is not a secondary concern. It is the care itself.

Queensland Health and its services provide hospital inpatient, outpatient, and emergency care, children’s healthcare, aged care, rural care, midwifery, telehealth services, oral health services, and mental health services. The digital identity through which patients access each of these services — finding them, verifying them, communicating with them, receiving results and referrals from them — is the connective tissue of the system. It is not separate from the health covenant. It is increasingly constitutive of it.

PERMANENCE AS A PUBLIC HEALTH ASSET.

The argument for permanent digital infrastructure in Queensland Health is ultimately the same argument that justified the free public hospital system in 1946. At that historical juncture, Queensland chose to treat hospital care as a civic right rather than a commercial service — to make its provision structural, universal, and durable rather than contingent, means-tested, and provisional. The decision was not merely humanitarian. It was an act of institutional architecture. It built the foundations of a health system that could carry the covenant of care across generations.

The equivalent decision in the digital era is to treat the institutional identity of Queensland’s health system with the same permanence and sovereignty that is accorded to its physical infrastructure. A named hospital does not expire. Its legal identity does not lapse because an annual renewal was missed. Its address in the physical world is not subject to commercial acquisition by a third party. These seem obvious protections — and they are, because they have been built into the institutional architecture of physical infrastructure over a century of governance.

The digital infrastructure of a public health system deserves the same protections. Not as a metaphor. As literal policy and practice. The addresses, the names, the digital locations through which citizens interact with Queensland Health — through which clinicians communicate, through which patients receive their records and referrals, through which the institution presents its authoritative voice — should be as permanent and as sovereign as the buildings and boards and Acts of Parliament through which the physical system is constituted.

Digital continues to be a critical enabler for effective health services for the people of Queensland. Since the development of Queensland Health’s digital health strategic vision in 2016, a strong foundation for digitally-enabled healthcare has been established. That foundation now requires the addition of sovereign identity infrastructure — not as a technological afterthought, but as a civic commitment consonant with the long history of public trust that Queensland Health has been built to carry.

The people who walk through the doors of a Queensland hospital in the middle of the night are not thinking about domain name systems or namespace governance. They are thinking about whether they are safe, whether they are known, whether the system around them is real. The digital infrastructure of public trust exists to make the answer to all three questions unambiguously yes — and to ensure that that answer is as durable as the covenant it was always meant to protect.