25 May 2026
Marcus
[FYI request #34562 email]
Tēnā koe Marcus
Your request for official information, reference: HNZ00203186
Thank you for your email on 28 April 2026, asking Health New Zealand | Te Whatu Ora for the
following under the Official Information Act 1982 (the OIA):
1. On Page 94, it's stated for Control ID "SUP.03 - Provenance & Version Tracking" that a
request action is "Unable to confirm where this model resides, no clarity provided by the
vendor" with a due date of Feb 2026. Given this due date has now passed, I'm interested in
any further efforts to identify where Heidi's model resides, such as further/updated
assessment reports. More specifically, I'm interested to know where Heidi is doing model
inferencing which is what I suspect the control note is getting at.
2. There is also mention of HNZ's Cyber AI System Register. I'm interested to hear a bit more
about that and would be interested in obtaining a copy if possible.
Response
Health New Zealand has a range of clinical and expert advisory groups guiding and governing our
use of AI tools:
• The
National AI and Algorithm Expert Advisory Group (NAIAEAG): This group guides and
endorses AI projects and research involving Health New Zealand
• Health X: Health New Zealand’s national programme for identifying, validating, and
enabling the safe and responsible use of AI across clinical and health system settings
• The Centre for Digital Modernisation of Health: A function created in December last year to
drive delivery of our 10-year
investment plan for digital health infrastructure
Information on guidance for the use of AI within Health New Zealand can be found here:
https://www.tewhatuora.govt.nz/health-services-and-programmes/digital-health/generative-ai-and-
large-language-models
Heidi's model resides in Sydney Australia. Heidi has committed to relocating this infrastructure to
New Zealand as the infrastructure becomes available.
The Cyber AI System Register is withheld under section 9(2)(b)(i ) of the OIA, to protect
information where release would be likely to unreasonably prejudice the commercial position of the
person who supplied or who is the subject of the information.
The register contains information about third-party vendors whose products and services are under
consideration, including in some instances where procurement processes are ongoing or have not
yet been finalised. Release of this information would be likely to disclose commercially sensitive
details about those vendors and their engagement with Health New Zealand, which could prejudice
their commercial position and undermine fair procurement processes.
I have considered whether the public interest in release outweighs the need to withhold this
information, and do not consider that it does in this instance.
How to get in touch
If you have any questions, you can contact us at
[email address].
If you are not happy with this response, you have the right to make a complaint to the
Ombudsman. Information about how to do this is available at
www.ombudsman.parliament.nz or
by phoning 0800 802 602.
Nāku iti noa, nā
pp
Matthew McLay
Manager Government Services
Health New Zealand | Te Whatu Ora
