HISO Health Information Security Framework 10029:2022
AS Van Wey (Account suspended) made this Official Information request to Ministry of Health
The request was refused by Ministry of Health.
From: AS Van Wey (Account suspended)
Dear Ministry of Health,
You have released a final version of the HISO Health Information Security Framework 10029:2022.
Section 5.7 states:
Tools and Templates
A separate set of documents which are a combination of checklists and guides will be
provided to the sector entities where there is limited or no documentation available to
assist with the implementation activities of HISF. These documents could be tailored to be fit for purpose based on the needs and requirements.
I request all of the separate documents which are a combination of checklists and guides which have been provide to the health sector entities.
I would also like clarification that it is a requirement for the NZ health sector to be compliant with the references provided in section 6, including HIPAA. Section 6 states:
Health Insurance Portability and Accountability Act (HIPAA) (US):
US based federal law that required the creation of national standards (HIPAA Security
Rule) to protect sensitive patient health information from being disclosed without the
patient’s consent or knowledge.
Please provide me the number times the Ministry of Health has authorized government information systems employees to assist a government employee (other than as authorized under the Search and Surveillance Act) to:
(1) intercept personal communications sent by a member of the public, with out the consent of the sender; and
(2) intercept personal communications sent by a member of the public, without the consent of either the sender or the the intended recipient (i.e, specified individual like a physician, or specified department, like the Clinical Records department).
Yours faithfully,
AS Van Wey
From: OIA Requests
Kia ora,
Please find attached a letter relating to your official information act
request.
Ngā mihi
OIA Services Team
Manatū Hauora | Ministry of Health
M[1]inistry of Health information releases
U[2]nite against COVID-19
show quoted sections
References
Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/
From: OIA Requests
Kia ora,
Please find attached a letter relating to your official information act
request.
Ngā mihi
OIA Services Team
Manatū Hauora | Ministry of Health
M[1]inistry of Health information releases
U[2]nite against COVID-19
show quoted sections
References
Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/
From: AS Van Wey (Account suspended)
Dear Ministry of Health,
Given it is the ministry of health who dictates the standards, I disagree that this is more aligned with Health NZ. Please go back and look at the legislative authority who is responsible for setting the standards for the public health sector. The public health sector does not set its own standards! Thus, Health NZ (the public health sector) is not the appropriate agency to handle my request.
If you believe the Public Health Sector sets their own standards, please provide me to the reference to the Act and section of that Act where Parliament has deemed this.
Yours faithfully,
AS Van Wey
From: hnzOIA
Tēnā koe,
Thank you for contacting Te Whatu Ora, Health NZ. This is an automatic
reply to confirm that we have received your email. Depending on the
nature of your request you may not receive a response for up to 20 working
days. We will try to respond to your query as quickly as possible.
s information that is identified to be of general public interest, the
response may also be published on our website. If we e response to your
OIA request, all personal information, including your name and contact
details will be removed.
Ngā mihi
Te Whatu Ora, Health NZ.
show quoted sections
From: OIA Requests
Kia ora AS Van Wey
Thank you for your email. The Act places a duty on all agencies to
consider if another agency that is also subject to the Act (or the local
government equivalent) might hold the information and transfer it to them.
This happens every single day, with the Ministry, for example transferring
to MBIE (about MIQ facilities), Justice (about coronial matters), to ESR
(about COVID testing) or to one of our relevant Ministers (e.g., for
Cabinet-related material) and receiving transfers from a range of
agencies. Likewise, Te Whatu Ora (Health New Zealand) and the districts,
both individually or collectively, often transfer to the Ministry if we
hold the information (e.g., hospital infrastructure plans).
As we noted in the transfer email, if you have concerns about the
Ministry’s decision to transfer the request, you have the right under
section 28 to seek a review of the Ministry’s decisions from the
Ombudsman. The Ombudsman may be contacted
by email at: [email address] or by calling 0800 802 602.
Ngâ mihi
OIA Services Team
Manatû Hauora | Ministry of Health
M[1]inistry of Health information releases
U[2]nite against COVID-19
--------------------------------------------------------------------------
From: AS Van Wey <[FOI #22047 email]>
Sent: Friday, 10 March 2023 16:05
To: OIA Requests <[email address]>
Subject: Re: Official Information request - HISO Health Information
Security Framework 10029:2022
Dear Ministry of Health,
Given it is the ministry of health who dictates the standards, I disagree
that this is more aligned with Health NZ. Please go back and look at the
legislative authority who is responsible for setting the standards for the
public health sector. The public health sector does not set its own
standards! Thus, Health NZ (the public health sector) is not the
appropriate agency to handle my request.
If you believe the Public Health Sector sets their own standards, please
provide me to the reference to the Act and section of that Act where
Parliament has deemed this.
Yours faithfully,
AS Van Wey
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #22047 email]
Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[3]https://scanmail.trustwave.com/?c=15517&...
If you find this service useful as an Official Information officer, please
ask your web manager to link to us from your organisation's OIA or LGOIMA
page.
show quoted sections
This e-mail message has been scanned for Viruses and Content and cleared
by the Ministry of Health's Content and Virus Filtering Gateway
--------------------------------------------------------------------------
References
Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/
3. https://scanmail.trustwave.com/?c=15517&...
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Offensive? Unsuitable?
Requests for personal information and vexatious requests are not considered valid requests for Official Information (read more).
If you believe this request is not suitable, you can report it for attention by the site administrators
Report this requestAct on what you've learnt
Similar requests
Digital Health Information Standards
To Ministry of Health by Amy S Van Wey Lovatt (Account suspended)
Incident reporting by DHB - standards, requirements, policies
To Ministry of Health by Amy S Van Wey Lovatt (Account suspended)
List of all NZ Standards applicable to medical practitioners and laboratories
To Ministry of Health by Amy S Van Wey Lovatt (Account suspended)
Publication of all DHB Policies, Protocols and Best Practice Documents
To Health and Disability Commissioner by Amy S Van Wey Lovatt (Account suspended)
