The current Australian legal, administrative and professional standards for individual rights to confidentiality and privacy of health records are examined and guidance is offered for the use of personal information in research. The implications of recently introduced privacy legislation for the conduct of research in Australia are discussed. Acquired immunodeficiency syndrome (AIDS) is cited as an example of the complex issues which face researchers and administrative bodies in balancing the privacy rights of individuals and the broader public interest.