Dear Taranaki District Health Board,

I am writing to request information regarding the extent to which the Datix Midland Integrated Quality and Risk system (used for reporting complaints and incidents) was compromised by the cyber attack at Waikato DHB.

I note that Lakes District Health Board, Taranaki DHB, Bay of Plenty DHB and Tairawhiti District Health Boards all use the same was Datix Midland Integrated Quality and Risk system as Waikato DHB, and some of these reports, when entered, are automatically sent to the Health Quality & Safety Commission.

Yours faithfully,

Amy S Van Wey Lovatt

Dear Lisa Varga [TDHB],

I was very confused by your response. the HQSC stated that datix information is shared with them. Now your saying this is not the case. Would you please clarify?

Also, please provide me with information as to where the servers are located which hold Datix information as well as copies of contracts with all companies that store or have access to Datix information.

Yours sincerely,

Amy S Van Wey Lovatt

Dear Lisa Varga [TDHB],

Your response has not answered my questions.

I have requested copies of all contracts with companies who provide servers (cloud and physical services). However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

I have requested a copy of the formal investigation into the matter of whether the Datix system had been compromised. However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

I have requested the locations of the servers on which information on the Datix system are stored. However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

Please provide me with a copy of your DHBs protocol, manual, guideline, etc, for reporting incidents to the HQSC, if it is not sent electronically through the Datix system, as asserted by the HQSC.

Yours sincerely,

Amy S Van Wey Lovatt