- Hon Simeon Brown
Health Minister Simeon Brown has commissioned the Ministry of Health to review the response to a ManageMyHealth cyber security breach involving patient information.
ManageMyHealth is a privately operated patient portal used by some general practices around New Zealand. It holds medical information and enables patients to communicate with health professionals.
"I know this breach will be very concerning to the many New Zealanders who use ManageMyHealth, and we need assurances around the protection and security of people's health data," Mr Brown says.
"Patient data is incredibly personal and whether it is held by a public agency or a private company, it must be protected to the highest of standards.
"I have decided to commission the Ministry of Health to lead a review of the ManageMyHealth and Health New Zealand's response.
"We must learn from this incident, to avoid any repeat events in the future."
The purpose of the review will be to:
• assess the cause(s) of the incident,
• review the adequacy of the data protections that were in place and the response to the incident, and
• recommend any improvements required to prevent similar incidents occurring.
"I have written to the Director-General of Health asking that the review will commence no later than 30 January," Mr Brown says.
"While this review should commence as soon as possible, it is important that the focus continues to be on the immediate response to the incident and that we do not distract from this response. An Incident Management Team has been meeting daily to coordinate advice and support across government agencies.
"In the meantime, I expect the Ministry to develop Terms of Reference, in consultation with the Government Chief Digital Officer and the National Cyber Security Centre (NCSC), and a timeline for the review process."
Health New Zealand has advised there has been no impact on its systems. It is working with primary care providers through General Practice New Zealand (GPNZ) to clarify the potential impact on patients and general practices. General practices remain open and providing services.
