( September 24, 2026, 05:09 GMT | Official Statement) -- MLex Summary: New Zealand’s privacy regulator has issued compliance notices to private patient portal Manage My Health and national public health service Health NZ over their failure to comply with security requirements leading to a data breach in December 2025. In a statement on Wednesday, New Zealand’s Office of the Privacy Commissioner said the notices were issued following Privacy Commissioner Michael Webster’s May report into Manage My Health’s cyber incident. The regulator identified seven areas where security protections were ineffective, with Health NZ given until Jan. 29, 2027, and Manage My Health until Aug. 31, 2027, to complete the required changes.Statement follows. Compliance notices are attached.Privacy Commissioner issues Compliance Notices to Manage My Health and Health NZ...
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.