Reply To: Manage My Health hack thread

We have received the following from the Office of the Privacy Commissioner:

Kia or Dr Burrell

I acknowledge receipt of your letter to Michael Webster, Privacy Commissioner on 7 January regarding the cyber b reach of the Manage My Health cyber breach impacting multiple GPs, PHOs, patients and other users.

We are aware that there is concern in the primary care health care sector regarding the responsibilities of GPs, PHOs and other primary care providers that use Manage My Health. The Commissioner has published a statement for these agencies that responds to the concern raised in your letter regarding the obligations of GPs to OPC and their patients. We understand that Manage My Health is nearly complete in notifying affected users, and that affected GP and PHO agencies have already been notified.

We ask your assistance in communicating this statement through any relevant channels you have. There are two statements that are relevant:

– Advisory notice from the Privacy Commissioner to all primary care providers affected by the Manage My Health data breach.

– Updated statement on Manage My Health cyber incident

Thank you for your assistance, and please let me know if you have any questions or think there would be additional information useful for those agencies.

Kia pai to rā

Susan Allen (she/her)

Kaiwhakahaere Tautukunga, Whakaū |Compliance and Enforcement Manager

Te Mana Mātāpono Matatapu | Office of the Privacy Commissioner