2026 PIA Review for Heidi Health

Marcus made this Official Information request to Health New Zealand

The request was refused by Health New Zealand.

From: Marcus

Dear Health New Zealand,

Earlier this year, as part of OIA HNZ00106690, a number of contracts and other documents relating to Heidi Health (aka Hendrix Health) were released.

Among them was the Privacy Impact Assessment performed for Heidi Health.

In the attached Risk and Mitigation tables (Page 61 of the above document bundle), Reference No. R.01 states that the Privacy Impact Assessment will be proactively reviewed every 12 months, with the oldest sign-off date being today (viewable here: https://static.info.content.health.nz/do...)

As such, I would like to request the following:

1. Any subsequent versions of the Heidi Health PIA, whether in the form of a newly signed PIA or modifications/amendments to the existing PIA
2. Any supporting documents regarding the review and/or renewal of the PIA, such as briefings, memos, discussion documents, meeting minutes and so on.
3. Any correspondence between Health New Zealand and Heidi Health, specifically regarding the review and/or renewal of the PIA

Yours faithfully,

Marcus

Link to this

From: hnzOIA

Tçnâ koe,

 

Thank you for your email. 

 

Under the Official Information Act (OIA), agencies are required to respond
to requests for official information as soon as reasonably practicable and
no later than 20 working days after receiving them.

If your request is for data that Health NZ holds, have you checked
[1]Lighthouse first to see if the data you are seeking is already
published?

 

Lighthouse is a searchable catalogue that makes a range of data and
analytics products available to New Zealanders to enable easier, faster
access to insights about health services.

 

You can find further information about how OIA timeframes are calculated,
including the Ombudsman’s OIA calculator, at the link below:
[2]Official information calculators | Ombudsman New Zealand

 

We will provide a response to your request in line with the statutory
timeframes set out in the OIA.

We appreciate your understanding and patience during this time.

 

Ngâ mihi,
Health NZ | Te Whatu Ora

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. https://www.tewhatuora.govt.nz/for-healt...
https://www.tewhatuora.govt.nz/for-healt...
2. https://aus01.safelinks.protection.outlo...
https://www.ombudsman.parliament.nz/agen...

Link to this

From: hnzOIA


Attachment image.png
91K Download

Attachment HNZ00205183 OIA Response.pdf
211K Download View as HTML


Kia ora Marcus, 
 
Thank you for your request for information regarding Privacy Impact
Assessment performed for Heidi Health on 30 June 2026. Please find
attached our response to your request.
 
If you have any questions, please get in touch at
[1][email address]
 
If you are not happy with this response, you have the right to make a
complaint to the Ombudsman. Information about how to do this is available
at [2]www.ombudsman.parliament.nz or by phoning 0800 802 602.
 
Ngâ mihi, 
 

Misty
Advisor, Government Services
Te Whatu Ora – Health New Zealand
TeWhatuOra.govt.nz

Statement of confidentiality: This email message and any accompanying
attachments may contain information that is IN-CONFIDENCE and subject to
legal privilege. If you are not the intended recipient, do not read, use,
disseminate, distribute or copy this message or attachments. If you have
received this message in error, please notify the sender immediately and
delete this message

References

Visible links
1. mailto:[Health New Zealand request email]
2. file:///tmp/

Link to this

Things to do with this request

Anyone:
Health New Zealand only: