Tēnā koe, 

 

Thank you for contacting Health NZ, Te Whatu Ora. This is an automatic
reply to confirm that we have received your email.  Depending on the
nature of your request you may not receive a response for up to 20 working
days.  We will try to respond to your query as quickly as possible.

 

 

Ngā mihi

 

Health NZ, Te Whatu Ora.

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

Tēnā koe Rodney,

 

Thank you for your email of 5 December 2024, asking for the following
information under the Official Information Act 1982 (the Act):

 

MedTech is New Zealand's largest Practice Management System, and thereby
directly and indirectly funded by Health New Zealand, nationally.

MedTech's data management system involves central aggregation of data.
Outline what data is stored, what MedTech does with this data, whether the
monetisation of this data is within the scope of HNZ's arrangements with
MedTech, what steps are taken to ensure this data is kept private and
secure, and not sold for commercial purposes such to pharmaceutical
companies. Outline what steps HNZ takes to ensure New Zealanders are
informed that their data is being used for commercial purposes, from the
MedTech platform.

Outline any accreditation, audits or assessments that Health New Zealand
has undertaken on this software since Health New Zealand began (2022).

A previous request to Ministry of Health and ACC outlines some important
questions that were successfully sidestepped by both parties: [1][link
here]

Valentia Technologies administer multiple digital health functions within
Health New Zealand, or by contracted third parties.

Provide risks assessments and reviews of the known vulnerabilities arising
from these systems, as well as any plans to address these vulnerabilities.
If HNZ is unaware of any vulnerabilities or does not contain information
on these vulnerabilities, please indicate what steps HNZ has taken to
ascertain this- process and areas discovered. HNZ does manage these
systems, so understanding why you would refuse or don't hold the
information will be important to resolving this request.

Provide an indication of the impact that the current change program in
HNZ's digital health area, will have on addressing these vulnerabilities. 

This email is to let you know that Health NZ needs more time to make a
decision on your request.

 

The Act requires that we advise you of our decision on your request no
later than 20 working days after the day we received your request.
Unfortunately, it will not be possible to meet that time limit and we are
therefore writing to notify you of an extension of the time to make our
decision, to 26 February 2025.

 

This extension is required because the volume of information and
consultations necessary to make a decision on your request are such that a
proper response cannot reasonably be made within the original time limit.

 

If you have any questions, please contact us
at [2][email address].

 

If you are not happy with this extension, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at www.ombudsman.parliament.nz or by phoning 0800 802 602.

  

Ngā mihi  

 

Dave

Government Services (OIA)

Health New Zealand | Te Whatu Ora

 

 

 

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. https://fyi.org.nz/request/22187-valenti...
2. mailto:[Health New Zealand request email]