Reminder of your privacy and information security obligations


Released 04/05/2026

Recent cyber security breaches involving third party digital health providers have reinforced the importance of strong information security practices across the health sector. These incidents have caused distress to people and impacted trust in how personal health information is managed.

For ACC providers, refer to Clause 9.1(c) in our Standard Terms and Conditions document

Standard Terms and Conditions | Download

Protecting personal and health information is critical to maintaining trust and confidence in the health system. We appreciate your ongoing commitment to upholding strong privacy and information security standards.

For more information on cyber security for organisations supporting healthcare in Aotearoa, visit:

Cyber Hub – Health New Zealand | Te Whatu Ora

Minimum Cyber Security Standards

Back to updates