Good morning Amy
Acknowledging receipt of your OIA request below, you will receive a response in due course.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-----Original Message-----
From: Amy S Van Wey Lovatt <[FOI #16698 email]>
Sent: Friday, 10 September 2021 11:50 AM
To: Corporate Contacts [TDHB] <[email address]>
Subject: Official Information request - Waikato hack - Datix Midland Integrated Quality and Risk system

Dear Taranaki District Health Board,

I am writing to request information regarding the extent to which the Datix Midland Integrated Quality and Risk system (used for reporting complaints and incidents) was compromised by the cyber attack at Waikato DHB.

I note that Lakes District Health Board, Taranaki DHB, Bay of Plenty DHB and Tairawhiti District Health Boards all use the same was Datix Midland Integrated Quality and Risk system as Waikato DHB, and some of these reports, when entered, are automatically sent to the Health Quality & Safety Commission.

Yours faithfully,

Amy S Van Wey Lovatt

-------------------------------------------------------------------

This is an Official Information request made via the FYI website.

Please use this email address for all replies to this request:
[FOI #16698 email]

Is [Taranaki District Health Board request email] the wrong address for Official Information requests to Taranaki District Health Board? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

This email, including its attachments, may contain personal information
that is privileged and confidential including patient information that
is sensitive, or protected by privacy laws.

If you are not the intended recipient, please immediately notify us by
responding to this message and erase this message and attachments
and do not copy, forward or in any way reveal the contents
of this email to anyone else.

Taranaki District Health Board is not responsible for any changes
made to this message and/or any attachments after
sending by Taranaki District Health Board.

______________________________________________________________________________

This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________

hide quoted sections

Good afternoon Amy
In relation to your OIA request below, please find attached a response from Taranaki District Health Board.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-----Original Message-----
From: Amy S Van Wey Lovatt <[FYI request #16698 email]>
Sent: Friday, 10 September 2021 11:50 AM
To: Corporate Contacts [TDHB] <[email address]>
Subject: Official Information request - Waikato hack - Datix Midland Integrated Quality and Risk system

Dear Taranaki District Health Board,

I am writing to request information regarding the extent to which the Datix Midland Integrated Quality and Risk system (used for reporting complaints and incidents) was compromised by the cyber attack at Waikato DHB.

I note that Lakes District Health Board, Taranaki DHB, Bay of Plenty DHB and Tairawhiti District Health Boards all use the same was Datix Midland Integrated Quality and Risk system as Waikato DHB, and some of these reports, when entered, are automatically sent to the Health Quality & Safety Commission.

Yours faithfully,

Amy S Van Wey Lovatt

-------------------------------------------------------------------

This is an Official Information request made via the FYI website.

Please use this email address for all replies to this request:
[FYI request #16698 email]

Is [Taranaki District Health Board request email] the wrong address for Official Information requests to Taranaki District Health Board? If so, please contact us using this form:
https://fyi.org.nz/change_request/new?bo...

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

This email, including its attachments, may contain personal information
that is privileged and confidential including patient information that
is sensitive, or protected by privacy laws.

If you are not the intended recipient, please immediately notify us by
responding to this message and erase this message and attachments
and do not copy, forward or in any way reveal the contents
of this email to anyone else.

Taranaki District Health Board is not responsible for any changes
made to this message and/or any attachments after
sending by Taranaki District Health Board.

______________________________________________________________________________

This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________

hide quoted sections

Good morning Amy
I have asked our Chief Information Officer for a response to your query below and will respond when received.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth

-----Original Message-----
From: Amy S Van Wey Lovatt <[FOI #16698 email]>
Sent: Monday, 4 October 2021 12:27 PM
To: Lisa Varga [TDHB] <[email address]>
Subject: RE: Official Information request - Waikato hack - Datix Midland Integrated Quality and Risk system

Dear Lisa Varga [TDHB],

I was very confused by your response. the HQSC stated that datix information is shared with them. Now your saying this is not the case. Would you please clarify?

Also, please provide me with information as to where the servers are located which hold Datix information as well as copies of contracts with all companies that store or have access to Datix information.

Yours sincerely,

Amy S Van Wey Lovatt

-----Original Message-----

Good afternoon Amy
In relation to your OIA request below, please find attached a response from Taranaki District Health Board.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #16698 email]

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

This email, including its attachments, may contain personal information
that is privileged and confidential including patient information that
is sensitive, or protected by privacy laws.

If you are not the intended recipient, please immediately notify us by
responding to this message and erase this message and attachments
and do not copy, forward or in any way reveal the contents
of this email to anyone else.

Taranaki District Health Board is not responsible for any changes
made to this message and/or any attachments after
sending by Taranaki District Health Board.

______________________________________________________________________________

This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________

hide quoted sections

Good morning Amy

As advised I have sought a response from our Chief Information Officer - please see below:

Q1: I was very confused by your response; the HQSC stated that Datix information is shared with them - now your saying this is not the case. Would you please clarify?
The answer we provided in the initial OIA response related to there being no data/reports sent electronically from our instance of Datix to HQSC. However there is no way we can determine if this is manually sent. Any staff member with access to Datix who can run a report could potentially export this and forward to HQSC. This is therefore outside of the controls and automated reporting of the Datix application.

Q2: Also, please provide me with information as to where the servers are located which hold Datix information.
For security reasons, we will not be commenting on our computer systems at this time.

Q3: As well as copies of contracts with all companies that store or have access to Datix information.
Taranaki DHB will not be releasing this information.

I hope this answers your further queries.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-----Original Message-----
From: Amy S Van Wey Lovatt <[FOI #16698 email]>
Sent: Monday, 4 October 2021 12:27 PM
To: Lisa Varga [TDHB] <[email address]>
Subject: RE: Official Information request - Waikato hack - Datix Midland Integrated Quality and Risk system

Dear Lisa Varga [TDHB],

I was very confused by your response. the HQSC stated that datix information is shared with them. Now your saying this is not the case. Would you please clarify?

Also, please provide me with information as to where the servers are located which hold Datix information as well as copies of contracts with all companies that store or have access to Datix information.

Yours sincerely,

Amy S Van Wey Lovatt

-----Original Message-----

Good afternoon Amy
In relation to your OIA request below, please find attached a response from Taranaki District Health Board.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #16698 email]

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

This email, including its attachments, may contain personal information
that is privileged and confidential including patient information that
is sensitive, or protected by privacy laws.

If you are not the intended recipient, please immediately notify us by
responding to this message and erase this message and attachments
and do not copy, forward or in any way reveal the contents
of this email to anyone else.

Taranaki District Health Board is not responsible for any changes
made to this message and/or any attachments after
sending by Taranaki District Health Board.

______________________________________________________________________________

This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________

hide quoted sections

Good afternoon Amy
In relation to your email below, please find attached a response from Taranaki District Health Board.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-----Original Message-----
From: Amy S Van Wey Lovatt <[FOI #16698 email]>
Sent: Tuesday, 19 October 2021 10:30 AM
To: Lisa Varga [TDHB] <[email address]>
Subject: Re: FW: Official Information request - Waikato hack - Datix Midland Integrated Quality and Risk system

Dear Lisa Varga [TDHB],

Your response has not answered my questions.

I have requested copies of all contracts with companies who provide servers (cloud and physical services). However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

I have requested a copy of the formal investigation into the matter of whether the Datix system had been compromised. However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

I have requested the locations of the servers on which information on the Datix system are stored. However you have not given me a legal justification for denying my request. Please provide me with the legal justification: section and clause of the OIA for the refusal.

Please provide me with a copy of your DHBs protocol, manual, guideline, etc, for reporting incidents to the HQSC, if it is not sent electronically through the Datix system, as asserted by the HQSC.

Yours sincerely,

Amy S Van Wey Lovatt

-----Original Message-----

Good morning Amy

As advised I have sought a response from our Chief Information Officer - please see below:

Q1: I was very confused by your response; the HQSC stated that Datix information is shared with them - now your saying this is not the case. Would you please clarify?
The answer we provided in the initial OIA response related to there being no data/reports sent electronically from our instance of Datix to HQSC. However there is no way we can determine if this is manually sent. Any staff member with access to Datix who can run a report could potentially export this and forward to HQSC. This is therefore outside of the controls and automated reporting of the Datix application.

Q2: Also, please provide me with information as to where the servers are located which hold Datix information.
For security reasons, we will not be commenting on our computer systems at this time.

Q3: As well as copies of contracts with all companies that store or have access to Datix information.
Taranaki DHB will not be releasing this information.

I hope this answers your further queries.
Regards
Lisa

Lisa Varga
PA to Chief Executive
Taranaki District Health Board
Private Bag 2016, New Plymouth
Phone 06 753 7781

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #16698 email]

Disclaimer: This message and any reply that you make will be published on the internet. Our privacy and copyright policies:
https://fyi.org.nz/help/officers

If you find this service useful as an Official Information officer, please ask your web manager to link to us from your organisation's OIA or LGOIMA page.

-------------------------------------------------------------------

This email, including its attachments, may contain personal information
that is privileged and confidential including patient information that
is sensitive, or protected by privacy laws.

If you are not the intended recipient, please immediately notify us by
responding to this message and erase this message and attachments
and do not copy, forward or in any way reveal the contents
of this email to anyone else.

Taranaki District Health Board is not responsible for any changes
made to this message and/or any attachments after
sending by Taranaki District Health Board.

______________________________________________________________________________

This email has been scrubbed for your protection by SMX.
For more information visit http://smxemail.com
______________________________________________________________________________

hide quoted sections