{"id":608741,"date":"2026-09-23T02:04:10","date_gmt":"2026-09-23T02:04:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/608741\/"},"modified":"2026-09-23T02:04:10","modified_gmt":"2026-09-23T02:04:10","slug":"privacy-commissioner-puts-manage-my-health-health-nz-on-notice-after-data-breach","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/608741\/","title":{"rendered":"Privacy Commissioner puts Manage My Health, Health NZ on notice after data breach"},"content":{"rendered":"

The hackers compromised 403,730 Health New Zealand documents and 22,609 documents that had been uploaded by patients.<\/p>\n

Now, Commissioner Michael Webster has put the two organisations on notice and set deadlines for them to meet requirements.<\/p>\n

The notices were issued for failing to comply at the time of the breach with the security requirements of rule 5 of the Health Information Privacy Code.<\/p>\n

The rules required Manage My Health<\/a> to ensure there were reasonable safeguards to prevent loss, misuse or disclosure of personal information.<\/p>\n

Webster noted some changes had already been completed.<\/p>\n

Manage My Health had already improved on the effectiveness of multifactor authentication, as well as restricting user access to information and controlling unauthorised external access, the commissioner\u2019s office said.<\/p>\n

Webster said he was thinking particularly of M\u0101ori in Northland, where 90% of the affected patients whose data was stolen live.<\/p>\n

\u201cThese Compliance Notices will ensure, and confirm to me, that Manage My Health and Health New Zealand<\/a> are treating patient data securely and it will give New Zealanders assurance that we take these breaches seriously and that strengthening systems is vitally important,\u201d he said.<\/p>\n

Manage My Health has until the end of August 2027 to make the changes, while Health New Zealand has until the end of January.<\/p>\n","protected":false},"excerpt":{"rendered":"The hackers compromised 403,730 Health New Zealand documents and 22,609 documents that had been uploaded by patients. Now,…\n","protected":false},"author":2,"featured_media":608742,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[74,27129,4378,14903,3105,38268,134,9554,4977,111,43,139,11552,69,90,6903,43296],"class_list":["post-608741","post","type-post","status-publish","format-standard","has-post-thumbnail","category-new-zealand","tag-after","tag-blackwell","tag-breach","tag-commissioner","tag-data","tag-finn","tag-health","tag-manage","tag-my","tag-new-zealand","tag-news","tag-newzealand","tag-notice","tag-nz","tag-on","tag-privacy","tag-puts"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/608741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=608741"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/608741\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/608742"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=608741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=608741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=608741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}