INFORMATION MANAGEMENT
Information matching agreements, including privacy impact assessments and associated process documentation. Official Information Act, Privacy Act and Health Information Privacy Code.
Work examples include:
Recent COVID-19 related work has included privacy by design assistance with Ministry of Health COVID-19 work, including developing the Privacy Impact Assessments, and related documents for the following projects:
- Ministry cloud based IT systems including the National Contact Tracing Solution, the National Border Solution, the Border Workforce Testing Register, Nau Mai Rā (for Quarantine Free Travel), and the proof of concept for the COVID Immunisation Register
- Consumer facing applications and web forms including the COVID Tracer App, My Health Account, My Covid Record (including My Vaccine Pass), Book My Vaccine and the contact tracing self-reporting form
- Privacy Impact Assessments, including Privacy by Design. Examples:
Privacy Impact Assessments for:
- the National Electronic Health Record (eHR)
- the National Maternity Record (NMR)
- the Universal Newborn Hearing Screening Collection
- the Bowel Screening Programme
- the Whanau Ora Information System (Mahere), including development of Privacy Training Modules and Policy Documentation
Examples of previous work include the National Screening Solution platform including the Bowel Screening Register, and the complex information matching agreement between the Ministry of Health and Immigration New Zealand to determine the eligibility of individuals to PHO health care subsidies.
Additional services in this area include:
- Privacy breach responses
- Advice on collection of personal and health information, and assistance with requests to disclose information, including advice as to when to withhold information.
- Preparation of responses to investigation by the Privacy Commissioner or Ombudsman.
- Provision of client training to ensure staff are aware of responsibilities in dealing with information.
