Kia ora Amy,

 

Whether a NZ based health provider must comply with international privacy
laws (such as the GDPR or HIPPA) depends on a number of factors, including
whether that provider handles any health information of anyone living
within a different country that is bound by different privacy legislation.
We cannot advise on whether a particular New Zealand based organisation
must comply with international privacy regulations or statutes.

 

The New Zealand Privacy Commissioner does not advise NZ agencies on their
obligations under international data protection law. Nor we would
investigate breaches or enforce an international law requirement.

 

If you have any questions about what obligations overseas health providers
have in relation to complying with the GDPR, HIPPA or any other
international data protection law, please contact the relevant regulator
in these jurisdictions.

 

For more information about the GDPR and HIPPA, please refer to the links
below:

 

o [1]https://privacy.org.nz/tools/knowledge-b...
o [2]https://www.hhs.gov/hipaa/for-profession...
o [3]https://digitalguardian.com/blog/what-hi...

 

 

Ngā mihi

 

Investigations & Dispute Resolution Team, Wellington

Office of the Privacy Commissioner  Te Mana Mātāpono Matatapu
PO Box 10094, The Terrace, Wellington 6143

privacy.org.nz   

 

[4][IMG]

Privacy is about protecting personal information, yours and others. To
find out how, and to stay informed, [5]subscribe to our newsletter
or follow us online. [6]Description: Description: Description: Small
facebook icon [7]Description: twitter-bird-blue-on-whiteHave a privacy
question? [8]AskUs

 

Caution: If you have received this message in error please notify the
sender immediately and delete this message along with any attachments. 
Please treat the contents of this message as private and confidential.
Thank you.

 

 

 

 

show quoted sections