New Zealand: Privacy Commissioner's investigation into Manage My Health over alleged cybersecurity breach
Progress
Current status
under investigation
25 May 2026 under investigation
21 Jan 2026 under deliberation
Scope
Implementers
New Zealand
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: other
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Office of Privacy Commissioner issued preliminary findings against Manage My Health including determination of inadequate security safeguards
On 25 May 2026, the Office of the Privacy Commissioner published preliminary findings from its inquiry into a cybersecurity breach affecting Manage My Health Limited's (MMH) patient portal, concluding that both MMH and Health New Zealand failed to m…
Event type
investigation
Action type
interim ruling
Government branch
executive
Government body
data protection authority
Office of Privacy Commissioner announced investigation into Manage My Health over alleged cybersecurity breach
On 21 January 2026, the Office of the Privacy Commissioner announced an investigation into Manage My Health over a cybersecurity breach in the digital health sector that handles sensitive patient information. The investigation seeks to examine the c…
Event type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority