Should private health data-retention requirements be changed?

A former HBF customer was told no, when he requested the private health provider delete any personal information they had on file.
HBF said in a statement to 6PR, health sector data retention is the subject of various pieces of legislation, which place obligations on health funds.
Private Healthcare Australia CEO Rachel David told Oly Peterson on Perth Live, no health fund holds onto customers health data in circumstances that aren’t necessary.
Is raised the question; what information are they required to retain?
And should those requirements now been changed following recent data hacks?
LISTEN to the full conversation with Rachel David and Oly Peterson below.