Office of the Privacy Commissioner
PO Box 10094, Wellington 6140
Level 11, 215 Lambton Quay
Wellington, New Zealand
P +64 4 474 7590 F +64 4 474 7595
E [email address]
0800 803 909 Enquiries
privacy.org.nz
21 January 2026
Marcus
By email only to: [FYI request #33459 email]
Tēnā koe
Official Information Act Request (Our Ref: OIA/0498)
We refer to your fyi Official Information Act request of 8 January 2026:
I was having a read of this article which references an anonymous email received by the
Of ice of the Privacy Commissioner back in June 2025.
https:/ businessdesk.co.nz/article/law-regulation/manage-my-health-privacy-
commissioner-warned-of-security-risks-six-months-ago
It states the following about the aforementioned email:
> The tipster alleged names, email addresses and passwords were "exposed by the
Manage My Health platform"
Would you be able to release a copy of this email for public viewing?
As per section 206 of the Privacy Act, there is an obligation on the Privacy Commissioner
and staff at the Of ice of the Privacy Commissioner to maintain secrecy in respect of all
matters that come to their knowledge in the exercise of their functions under the Act. In this
case the requested email was received by the Office through our Compliance monitoring
function. The OPC needs to maintain the secrecy of communications about compliance
issues so that people can be assured of confidentiality when raising issues with us.
Your request is therefore refused under section 18(c)(i) of the Official Information Act on the
ground that making available the information that you have requested would be contrary to
the provisions of a specified enactment (the provision here being s 206 of the Privacy Act).
OIA/0498/A1151028
2
Please note that if you are not satisfied with this response to your request, under section 28
of the Of icial Information Act 1982 you have the right to ask the Ombudsman to investigate
and review our decision on your request, however we would appreciate the opportunity to
discuss this with you first.
Nāku iti noa, nā
Liz MacPherson
Deputy Privacy Commissioner
OIA/0498/A1151028
