HISO Health Information Security Framework 10029:2022

AS Van Wey (Account suspended) made this Official Information request to Ministry of Health

The request was refused by Ministry of Health.

From: AS Van Wey (Account suspended)

Dear Ministry of Health,

You have released a final version of the HISO Health Information Security Framework 10029:2022.

Section 5.7 states:
Tools and Templates
A separate set of documents which are a combination of checklists and guides will be
provided to the sector entities where there is limited or no documentation available to
assist with the implementation activities of HISF. These documents could be tailored to be fit for purpose based on the needs and requirements.

I request all of the separate documents which are a combination of checklists and guides which have been provide to the health sector entities.

I would also like clarification that it is a requirement for the NZ health sector to be compliant with the references provided in section 6, including HIPAA. Section 6 states:

Health Insurance Portability and Accountability Act (HIPAA) (US):
US based federal law that required the creation of national standards (HIPAA Security
Rule) to protect sensitive patient health information from being disclosed without the
patient’s consent or knowledge.

Please provide me the number times the Ministry of Health has authorized government information systems employees to assist a government employee (other than as authorized under the Search and Surveillance Act) to:
(1) intercept personal communications sent by a member of the public, with out the consent of the sender; and
(2) intercept personal communications sent by a member of the public, without the consent of either the sender or the the intended recipient (i.e, specified individual like a physician, or specified department, like the Clinical Records department).

Yours faithfully,

AS Van Wey

Link to this

From: OIA Requests


Attachment Outlook bsbp1i5r.png
80K Download

Attachment Transfer letter H2023021536.pdf
208K Download View as HTML


Kia ora,

  

Please find attached a letter relating to your official information act
request.  

 

Ngā mihi 

 

OIA Services Team

Manatū Hauora | Ministry of Health

M[1]inistry of Health information releases 
U[2]nite against COVID-19 

 

****************************************************************************
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege.
If you are not the intended recipient, do not read, use, disseminate,
distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message.
****************************************************************************

--------------------------------------------------------------------------

This e-mail message has been scanned for Viruses and Content and cleared
by the Ministry of Health's Content and Virus Filtering Gateway

--------------------------------------------------------------------------

References

Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/

hide quoted sections

Link to this

From: OIA Requests


Attachment Outlook bsbp1i5r.png
80K Download

Attachment Transfer letter H2023021536.pdf
208K Download View as HTML


Kia ora,

  

Please find attached a letter relating to your official information act
request.  

Ngā mihi 

 

OIA Services Team

Manatū Hauora | Ministry of Health

M[1]inistry of Health information releases 
U[2]nite against COVID-19 

****************************************************************************
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege.
If you are not the intended recipient, do not read, use, disseminate,
distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message.
****************************************************************************

--------------------------------------------------------------------------

This e-mail message has been scanned for Viruses and Content and cleared
by the Ministry of Health's Content and Virus Filtering Gateway

--------------------------------------------------------------------------

References

Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/

hide quoted sections

Link to this

From: AS Van Wey (Account suspended)

Dear Ministry of Health,

Given it is the ministry of health who dictates the standards, I disagree that this is more aligned with Health NZ. Please go back and look at the legislative authority who is responsible for setting the standards for the public health sector. The public health sector does not set its own standards! Thus, Health NZ (the public health sector) is not the appropriate agency to handle my request.

If you believe the Public Health Sector sets their own standards, please provide me to the reference to the Act and section of that Act where Parliament has deemed this.

Yours faithfully,

AS Van Wey

Link to this

From: hnzOIA

Tēnā koe, 

 

Thank you for contacting Te Whatu Ora, Health NZ. This is an automatic
reply to confirm that we have received your email.  Depending on the
nature of your request you may not receive a response for up to 20 working
days.  We will try to respond to your query as quickly as possible.

s information that is identified to be of general public interest, the
response may also be published on our website. If we e response to your
OIA request, all personal information, including your name and contact
details will be removed.

 

Ngā mihi

 

Te Whatu Ora, Health NZ.

****************************************************************************
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege.
If you are not the intended recipient, do not read, use, disseminate,
distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message.
****************************************************************************

--------------------------------------------------------------------------

This e-mail message has been scanned for Viruses and Content and cleared
by the Ministry of Health's Content and Virus Filtering Gateway

--------------------------------------------------------------------------

hide quoted sections

Link to this

From: OIA Requests


Attachment Outlook 2rovqlhs.png
80K Download


Kia ora AS Van Wey
Thank you for your email. The Act places a duty on all agencies to
consider if another agency that is also subject to the Act (or the local
government equivalent) might hold the information and transfer it to them.
This happens every single day, with the Ministry, for example transferring
to MBIE (about MIQ facilities), Justice (about coronial matters), to ESR
(about COVID testing) or to one of our relevant Ministers (e.g., for
Cabinet-related material) and receiving transfers from a range of
agencies. Likewise, Te Whatu Ora (Health New Zealand) and the districts,
both individually or collectively, often transfer to the Ministry if we
hold the information (e.g., hospital infrastructure plans).  

As we noted in the transfer email, if you have concerns about the
Ministry’s decision to transfer the request, you have the right under
section 28 to seek a review of the Ministry’s decisions from the
Ombudsman. The Ombudsman may be contacted
by email at: [email address] or by calling 0800 802 602.  

Ngâ mihi 

  

OIA Services Team

Manatû Hauora | Ministry of Health

M[1]inistry of Health information releases 
U[2]nite against COVID-19 

--------------------------------------------------------------------------

From: AS Van Wey <[FOI #22047 email]>
Sent: Friday, 10 March 2023 16:05
To: OIA Requests <[email address]>
Subject: Re: Official Information request - HISO Health Information
Security Framework 10029:2022
 
Dear Ministry of Health,

Given it is the ministry of health who dictates the standards, I disagree
that this is more aligned with Health NZ. Please go back and look at the
legislative authority who is responsible for setting the standards for the
public health sector. The public health sector does not set its own
standards! Thus, Health NZ  (the public health sector) is not the
appropriate agency to handle my request.

If you believe the Public Health Sector sets their own standards, please
provide me to the reference to the Act and section of that Act where
Parliament has deemed this.

Yours faithfully,

AS Van Wey

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #22047 email]

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
[3]https://scanmail.trustwave.com/?c=15517&...

If you find this service useful as an Official Information officer, please
ask your web manager to link to us from your organisation's OIA or LGOIMA
page.

-------------------------------------------------------------------

****************************************************************************
Statement of confidentiality: This e-mail message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege.
If you are not the intended recipient, do not read, use, disseminate,
distribute or copy this message or attachments.
If you have received this message in error, please notify the sender
immediately and delete this message.
****************************************************************************

--------------------------------------------------------------------------

This e-mail message has been scanned for Viruses and Content and cleared
by the Ministry of Health's Content and Virus Filtering Gateway

--------------------------------------------------------------------------

References

Visible links
1. https://www.health.govt.nz/about-ministr...
2. https://covid19.govt.nz/
3. https://scanmail.trustwave.com/?c=15517&...

hide quoted sections

Link to this

Things to do with this request

Anyone:
Ministry of Health only: