Heidi Health Model Residence

Marcus made this Official Information request to Health New Zealand

The request was partially successful.

From: Marcus

Dear Health New Zealand,

This OIA is partly in response to OIA HNZ00106690 which was published on the HNZ website earlier today.

Starting on Page 86 of that response is a Heidi AI Scribe AI Security Assessment Report which I have a few different questions about:

1. On Page 94, it's stated for Control ID "SUP.03 - Provenance & Version Tracking" that a request action is "Unable to confirm where this model resides, no clarity provided by the vendor" with a due date of Feb 2026. Given this due date has now passed, I'm interested in any further efforts to identify where Heidi's model resides, such as further/updated assessment reports. More specifically, I'm interested to know where Heidi is doing model inferencing which is what I suspect the control note is getting at.
2. There is also mention of HNZ's Cyber AI System Register. I'm interested to hear a bit more about that and would be interested in obtaining a copy if possible.

Yours faithfully,

Marcus

Link to this

From: hnzOIA

Tçnâ koe,

 

Thank you for your email. 

 

Under the Official Information Act (OIA), agencies are required to respond
to requests for official information as soon as reasonably practicable and
no later than 20 working days after receiving them.

If your request is for data that Health NZ holds, have you checked
[1]Lighthouse first to see if the data you are seeking is already
published?

 

Lighthouse is a searchable catalogue that makes a range of data and
analytics products available to New Zealanders to enable easier, faster
access to insights about health services.

 

You can find further information about how OIA timeframes are calculated,
including the Ombudsman’s OIA calculator, at the link below:
[2]Official information calculators | Ombudsman New Zealand

 

We will provide a response to your request in line with the statutory
timeframes set out in the OIA.

We appreciate your understanding and patience during this time.

 

Ngâ mihi,
Health NZ | Te Whatu Ora

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. https://www.tewhatuora.govt.nz/for-healt...
https://www.tewhatuora.govt.nz/for-healt...
2. https://aus01.safelinks.protection.outlo...
https://www.ombudsman.parliament.nz/agen...

Link to this

From: hnzOIA


Attachment image.png
57K Download

Attachment HNZ00203186 Response.pdf
182K Download View as HTML


Kia ora Marcus, 
 
Thank you for your request for information regarding Heidi Health Model
Residence on 28 April 2026. Please find attached our response to your
request.
 
If you have any questions, please get in touch at
[1][email address]
 
If you are not happy with this response, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at [2]www.ombudsman.parliament.nz or by phoning 0800 802 602.
 
Ngā mihi, 

 

Cassandra
Government Services

Health New Zealand | Te Whatu Ora

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. mailto:[Health New Zealand request email]
2. file:///tmp/

Link to this

Things to do with this request

Anyone:
Health New Zealand only: