Story perspectives

Privacy Commissioner Orders Health Agencies to Fix Security by 2026

By Drooid · Sep 23, 2026, 6:36 AM UTC · How we work

Summary

Story summary

Health New Zealand and Manage My Health must meet privacy rules by next year, the Privacy Commissioner said.
The Privacy Commissioner found in May that the two agencies failed to maintain adequate security controls.
Manage My Health’s patient portal was hacked in December 2025, leaking almost 100,000 individuals’ data.
About 90% of the affected individuals lived in Northland.
Hundreds of thousands of medical files were stolen during the cyber attack.

1 of 1

Story summary

Health New Zealand and Manage My Health must meet privacy rules by next year, the Privacy Commissioner said.
The Privacy Commissioner found in May that the two agencies failed to maintain adequate security controls.
Manage My Health’s patient portal was hacked in December 2025, leaking almost 100,000 individuals’ data.
About 90% of the affected individuals lived in Northland.
Hundreds of thousands of medical files were stolen during the cyber attack.