Tēnā koe, 

 

Thank you for contacting Health NZ, Te Whatu Ora. This is an automatic
reply to confirm that we have received your email.  Depending on the
nature of your request you may not receive a response for up to 20 working
days.  We will try to respond to your query as quickly as possible.

 

 

Ngā mihi

 

Health NZ, Te Whatu Ora.

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

Tēnā koe Rodney,

 

Thank you for your email of 5 December 2024, asking for the following
information under the Official Information Act 1982 (the Act):

 

MedTech is New Zealand's largest Practice Management System, and thereby
directly and indirectly funded by Health New Zealand, nationally.

MedTech's data management system involves central aggregation of data.
Outline what data is stored, what MedTech does with this data, whether the
monetisation of this data is within the scope of HNZ's arrangements with
MedTech, what steps are taken to ensure this data is kept private and
secure, and not sold for commercial purposes such to pharmaceutical
companies. Outline what steps HNZ takes to ensure New Zealanders are
informed that their data is being used for commercial purposes, from the
MedTech platform.

Outline any accreditation, audits or assessments that Health New Zealand
has undertaken on this software since Health New Zealand began (2022).

A previous request to Ministry of Health and ACC outlines some important
questions that were successfully sidestepped by both parties: [1][link
here]

Valentia Technologies administer multiple digital health functions within
Health New Zealand, or by contracted third parties.

Provide risks assessments and reviews of the known vulnerabilities arising
from these systems, as well as any plans to address these vulnerabilities.
If HNZ is unaware of any vulnerabilities or does not contain information
on these vulnerabilities, please indicate what steps HNZ has taken to
ascertain this- process and areas discovered. HNZ does manage these
systems, so understanding why you would refuse or don't hold the
information will be important to resolving this request.

Provide an indication of the impact that the current change program in
HNZ's digital health area, will have on addressing these vulnerabilities. 

This email is to let you know that Health NZ needs more time to make a
decision on your request.

 

The Act requires that we advise you of our decision on your request no
later than 20 working days after the day we received your request.
Unfortunately, it will not be possible to meet that time limit and we are
therefore writing to notify you of an extension of the time to make our
decision, to 26 February 2025.

 

This extension is required because the volume of information and
consultations necessary to make a decision on your request are such that a
proper response cannot reasonably be made within the original time limit.

 

If you have any questions, please contact us
at [2][email address].

 

If you are not happy with this extension, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at www.ombudsman.parliament.nz or by phoning 0800 802 602.

  

Ngā mihi  

 

Dave

Government Services (OIA)

Health New Zealand | Te Whatu Ora

 

 

 

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. https://fyi.org.nz/request/22187-valenti...
2. mailto:[Health New Zealand request email]

Kia ora,
 
Thank you for your request under the Official Information Act 1982 (the
Act) for:
 

+------------------------------------------------------------------------+
|MedTech is New Zealand's largest Practice Management System, and thereby|
|directly and indirectly funded by Health New Zealand, nationally. |
| |
|  |
| |
|MedTech's data management system involves central aggregation of data. |
|Outline what data is stored, what MedTech does with this data, whether |
|the monetisation of this data is within the scope of HNZ's arrangements |
|with MedTech, what steps are taken to ensure this data is kept private |
|and secure, and not sold for commercial purposes such to pharmaceutical |
|companies. Outline what steps HNZ takes to ensure New Zealanders are |
|informed that their data is being used for commercial purposes, from the|
|MedTech platform. |
| |
|  |
| |
|Outline any accreditation, audits or assessments that Health New Zealand|
|has undertaken on this software since Health New Zealand began (2022). |
| |
|  |
| |
|A previous request to Ministry of Health and ACC outlines some important|
|questions that were successfully sidestepped by both parties: [1][link |
|here] |
| |
|  |
| |
|Valentia Technologies administer multiple digital health functions |
|within Health New Zealand, or by contracted third parties. |
| |
|  |
| |
|Provide risks assessments and reviews of the known vulnerabilities |
|arising from these systems, as well as any plans to address these |
|vulnerabilities. If HNZ is unaware of any vulnerabilities or does not |
|contain information on these vulnerabilities, please indicate what steps|
|HNZ has taken to ascertain this- process and areas discovered. HNZ does |
|manage these systems, so understanding why you would refuse or don't |
|hold the information will be important to resolving this request. |
| |
|  |
| |
|Provide an indication of the impact that the current change program in |
|HNZ's digital health area, will have on addressing these |
|vulnerabilities.  |
+------------------------------------------------------------------------+

 
Pursuant to section 15(1)(a) of the Act, Health New Zealand Te Whatu Ora,
is writing to advise you that a decision has been made on your request;
however, it will take us more time to finalise the information for
release. 
 
As it stands, some information will refused/withheld under the following
sections of the Act:
 

* 6(c), to avoid prejudice to the maintenance of the law;
* 9(2)(c), to avoid prejudice to measures protecting the health or
safety of members of the public;
* 18(e), that the document alleged to contain the information requested
does not exist; or
* 18(g), that the information requested is not held by Health NZ.

 
We apologise for the delay, and will endeavour to send you the information
without undue delay.
 
Under section 28(3) of the Act you have the right to ask the Ombudsman to
review any decisions made under this request. The Ombudsman may be
contacted by email at: [2][email address] or by calling 0800
802 602. 
 

Ngā mihi  

 

Dave

Government Services

Health New Zealand | Te Whatu Ora

 

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. https://fyi.org.nz/request/22187-valenti...
2. mailto:[email address]
mailto:[email address]

Kia ora Rodney,
 
Thank you for your request for information regarding MedTech on 05
December 2024. Please find attached our response to your request.
 

I apologise for the delay in providing our response. The time taken is not
what we aspire to. This is something we are working to get on top of as we
deal with a high volume of requests and the understandably high public
interest in our work.  

If you have any questions, please get in touch at
[1][email address]
 
If you are not happy with this response, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at [2]www.ombudsman.parliament.nz or by phoning 0800 802 602.
 

Ngā mihi  

 

Dave

Government Services

Health New Zealand | Te Whatu Ora

 

 
Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. mailto:[Health New Zealand request email]
2. file:///tmp/