2026 PIA Review for Heidi Health
Marcus made this Official Information request to Health New Zealand
The request was refused by Health New Zealand.
From: Marcus
Dear Health New Zealand,
Earlier this year, as part of OIA HNZ00106690, a number of contracts and other documents relating to Heidi Health (aka Hendrix Health) were released.
Among them was the Privacy Impact Assessment performed for Heidi Health.
In the attached Risk and Mitigation tables (Page 61 of the above document bundle), Reference No. R.01 states that the Privacy Impact Assessment will be proactively reviewed every 12 months, with the oldest sign-off date being today (viewable here: https://static.info.content.health.nz/do...)
As such, I would like to request the following:
1. Any subsequent versions of the Heidi Health PIA, whether in the form of a newly signed PIA or modifications/amendments to the existing PIA
2. Any supporting documents regarding the review and/or renewal of the PIA, such as briefings, memos, discussion documents, meeting minutes and so on.
3. Any correspondence between Health New Zealand and Heidi Health, specifically regarding the review and/or renewal of the PIA
Yours faithfully,
Marcus
From: hnzOIA
Tçnâ koe,
Thank you for your email.
Under the Official Information Act (OIA), agencies are required to respond
to requests for official information as soon as reasonably practicable and
no later than 20 working days after receiving them.
If your request is for data that Health NZ holds, have you checked
[1]Lighthouse first to see if the data you are seeking is already
published?
Lighthouse is a searchable catalogue that makes a range of data and
analytics products available to New Zealanders to enable easier, faster
access to insights about health services.
You can find further information about how OIA timeframes are calculated,
including the Ombudsman’s OIA calculator, at the link below:
[2]Official information calculators | Ombudsman New Zealand
We will provide a response to your request in line with the statutory
timeframes set out in the OIA.
We appreciate your understanding and patience during this time.
Ngâ mihi,
Health NZ | Te Whatu Ora
Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message
References
Visible links
1. https://www.tewhatuora.govt.nz/for-healt...
https://www.tewhatuora.govt.nz/for-healt...
2. https://aus01.safelinks.protection.outlo...
https://www.ombudsman.parliament.nz/agen...
From: hnzOIA
Kia ora Marcus,
Thank you for your request for information regarding Privacy Impact
Assessment performed for Heidi Health on 30 June 2026. Please find
attached our response to your request.
If you have any questions, please get in touch at
[1][email address]
If you are not happy with this response, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at [2]www.ombudsman.parliament.nz or by phoning 0800 802 602.
Ngâ mihi,
Misty
Advisor, Government Services
Te Whatu Ora – Health New Zealand
TeWhatuOra.govt.nz
Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message
References
Visible links
1. mailto:[Health New Zealand request email]
2. file:///tmp/
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence (note: this contains the same information already available above).
