New Zealand: Office of Privacy Commissioner issued preliminary findings against Manage My Health including determination of inadequate security safeguards

Description

Office of Privacy Commissioner issued preliminary findings against Manage My Health including determination of inadequate security safeguards

On 25 May 2026, the Office of the Privacy Commissioner published preliminary findings from its inquiry into a cybersecurity breach affecting Manage My Health Limited's (MMH) patient portal, concluding that both MMH and Health New Zealand failed to m…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: other
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2026-01-21
under deliberation

On 21 January 2026, the Office of the Privacy Commissioner announced an investigation into Manage M…

2026-05-25
under investigation

On 25 May 2026, the Office of the Privacy Commissioner published preliminary findings from its inqu…