Datix Midland Integrated Quality and Risk system
Amy S Van Wey Lovatt (Account suspended) made this Official Information request to Lakes District Health Board
The request was partially successful.
From: Amy S Van Wey Lovatt (Account suspended)
Dear Lakes District Health Board,
I am writing to request information regarding the extent to which the Datix Midland Integrated Quality and Risk system (used for reporting complaints and incidents) was compromised by the cyber attack at Waikato DHB.
I note that Lakes District Health Board, Taranaki DHB, Bay of Plenty DHB and Tairawhiti District Health Boards all use the same was Datix Midland Integrated Quality and Risk system as Waikato DHB, and some of these reports, when entered, are automatically sent to the Health Quality & Safety Commission.
Thank you,
Amy S Van Wey Lovatt
From: Shan Tapsell
Lakes District Health Board
Hi
Please see attached response.
Cheers
Shan Tapsell
Communications Advisor
Lakes District Health Board
Rotorua Hospital
Pukeroa Hill
Private Bag 3923
Rotorua Mail Centre
Rotorua 3046
Phone (07) 349 7955 extn:8491
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
www.lakesdhb.govt.nz
This email has been scrubbed for your protection by SMX. For more
information visit smxemail.com
From: Shan Tapsell
Lakes District Health Board
Hi Amy
Here are the answers to your extra questions following our OIA response.
Q: Please clarify as to whether the incident reports submitted into the
regional Datix system (all 5 hospitals) are shared on the same server,
which is also shared with the Health Quality & Safety Commissioner?
A: Te Manawa Taki DHBs have their own shared instance of Datix.
Q: Where is the server located? If there is more than one server which
holds the regional Datix system reports, where are these servers located?
A: For security reasons, we will not be commenting on our computer systems
at this time.
Q: If any of the information from the regional Datix system was leaked
from the cyber-attack at Waikato DHB.
A: The Datix regional Incident, Quality & Risk system was not impacted as
a result of, or during, the Waikato Security Incident.
Cheers
Shan Tapsell
Communications Advisor
Lakes District Health Board
Rotorua Hospital
Pukeroa Hill
Private Bag 3923
Rotorua Mail Centre
Rotorua 3046
Phone (07) 349 7955 extn:8491
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
[1]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
[2]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
[3]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
[4]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
www.lakesdhb.govt.nz
This email has been scrubbed for your protection by SMX. For more
information visit smxemail.com
References
Visible links
1. http://www.lakesdhb.govt.nz/
2. http://www.lakesdhb.govt.nz/
3. http://www.lakesdhb.govt.nz/
4. http://www.lakesdhb.govt.nz/
From: Amy S Van Wey Lovatt (Account suspended)
Dear Shan Tapsell,
It appears that you have copied your responses from Te Manawa Taki District Health Board dated 8 October 2021, or your agency and Te Manawa Taki District Health Board, have been provided the same cookie cutter response from some other agency.
I am writing for clarification because the response I received dated 14 October 2021 was not clear.
My Question 1: Please clarify as to whether the incident reports submitted into the regional Datix system (all 5 hospitals) are shared on the same server, which is also shared with the Health Quality & Safety Commissioner?
Your Response: Te Manawa Taki DHBs have their own shared instance of Datix.
I request for clarification. Are all reports in the regional Datix system located on one server, or multiple servers? Are all reports entered by members of your DHB held locally, on your DHBs servers, or are they also located on servers located at other DHBs and the Health Quality and Safety Commissioner? If there are also located at other DHBs, are they located at Waikato DHB?
My Question 2: Where is the server located? If there is more than one server which holds the regional Datix system reports, where are these servers located?
Your Response: For security reasons, we will not be commenting on our computer systems
at this time.
I request the legal reason, as set out in the OIA for refusing me this information. I do not require the specific building within the location, only the general physical location, such as your specific DHB, another DHB, within the MoH in Wellington, or some held by some other third party, such as those providing cloud archive support. Please provide me with copies of all contracts with suppliers who provide server (physical and cloud service) support for your DHB.
You have stated, "The Datix regional Incident, Quality & Risk system was not impacted as
a result of, or during, the Waikato Security Incident." I request a copy of the official investigative report which supports your assertion.
Yours sincerely,
Yours sincerely,
Amy S Van Wey Lovatt
From: Shan Tapsell
Lakes District Health Board
I am out of the office. If your matter is urgent please ring 027 234 2793.
Thanks
Shan Tapsell
Communications Team
Phone 07 3481199 ext 8491
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is www.lakesdhb.govt.nz
From: Shan Tapsell
Lakes District Health Board
Thank you Amy. I am logging this as another OIA.
Cheers
Shan Tapsell
Communications Advisor
Lakes District Health Board
Rotorua Hospital
Pukeroa Hill
Private Bag 3923
Rotorua Mail Centre
Rotorua 3046
Phone (07) 349 7955 extn:8491
-----Original Message-----
From: Amy S Van Wey Lovatt [mailto:[FOI #16696 email]]
Sent: Tuesday, 19 October 2021 9:10 AM
To: Shan Tapsell <[email address]>
Subject: Re: FW: extra OIA questions
CAUTION: This email originated from outside of the organisation. Do not click links or open attachments unless you recognise the sender and know the content is safe.
Dear Shan Tapsell,
It appears that you have copied your responses from Te Manawa Taki District Health Board dated 8 October 2021, or your agency and Te Manawa Taki District Health Board, have been provided the same cookie cutter response from some other agency.
I am writing for clarification because the response I received dated 14 October 2021 was not clear.
My Question 1: Please clarify as to whether the incident reports submitted into the regional Datix system (all 5 hospitals) are shared on the same server, which is also shared with the Health Quality & Safety Commissioner?
Your Response: Te Manawa Taki DHBs have their own shared instance of Datix.
I request for clarification. Are all reports in the regional Datix system located on one server, or multiple servers? Are all reports entered by members of your DHB held locally, on your DHBs servers, or are they also located on servers located at other DHBs and the Health Quality and Safety Commissioner? If there are also located at other DHBs, are they located at Waikato DHB?
My Question 2: Where is the server located? If there is more than one server which holds the regional Datix system reports, where are these servers located?
Your Response: For security reasons, we will not be commenting on our computer systems at this time.
I request the legal reason, as set out in the OIA for refusing me this information. I do not require the specific building within the location, only the general physical location, such as your specific DHB, another DHB, within the MoH in Wellington, or some held by some other third party, such as those providing cloud archive support. Please provide me with copies of all contracts with suppliers who provide server (physical and cloud service) support for your DHB.
You have stated, "The Datix regional Incident, Quality & Risk system was not impacted as a result of, or during, the Waikato Security Incident." I request a copy of the official investigative report which supports your assertion.
Yours sincerely,
Yours sincerely,
Amy S Van Wey Lovatt
-----Original Message-----
Hi Amy
Here are the answers to your extra questions following our OIA response.
Q: Please clarify as to whether the incident reports submitted into the regional Datix system (all 5 hospitals) are shared on the same server, which is also shared with the Health Quality & Safety Commissioner?
A: Te Manawa Taki DHBs have their own shared instance of Datix.
Q: Where is the server located? If there is more than one server which holds the regional Datix system reports, where are these servers located?
A: For security reasons, we will not be commenting on our computer systems at this time.
Q: If any of the information from the regional Datix system was leaked from the cyber-attack at Waikato DHB.
A: The Datix regional Incident, Quality & Risk system was not impacted as a result of, or during, the Waikato Security Incident.
Cheers
Shan Tapsell
Communications Advisor
Lakes District Health Board
Rotorua Hospital
Pukeroa Hill
Private Bag 3923
Rotorua Mail Centre
Rotorua 3046
Phone (07) 349 7955 extn:8491
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is [1]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is [2]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is [3]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is [4]www.lakesdhb.govt.nz
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is www.lakesdhb.govt.nz This email has been scrubbed for your protection by SMX. For more information visit smxemail.com
References
Visible links
1. http://www.lakesdhb.govt.nz/
2. http://www.lakesdhb.govt.nz/
3. http://www.lakesdhb.govt.nz/
4. http://www.lakesdhb.govt.nz/
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #16696 email]
Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://smex-ctp.trendmicro.com:443/wis/...
If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.
-------------------------------------------------------------------
Statement of confidentiality: This e-mail message and any accompanying attachments may contain information that is in confidence and subject to legal privilege. If you are not the intended recipient, do not read, use, disseminate, distribute, or copy this message or attachments. If you have received this message in error, please notify the sender immediately and delete this message. The Lakes District Health Board website is www.lakesdhb.govt.nz
______________________________________________________________________________
This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________
hide quoted sections
From: Shan Tapsell
Lakes District Health Board
Hi
Please see attached.
Cheers
Shan Tapsell
Communications Advisor
Lakes District Health Board
Rotorua Hospital
Pukeroa Hill
Private Bag 3923
Rotorua Mail Centre
Rotorua 3046
Phone (07) 349 7955 extn:8491
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is in confidence and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute, or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message. The Lakes District Health Board website is
www.lakesdhb.govt.nz
This email has been scrubbed for your protection by SMX. For more
information visit smxemail.com
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence