Nau mai, haere mai

Compliance Notices issued to Manage My Health and Health NZ

Privacy Commissioner Michael Webster has issued both Manage My Health (MMH) and Health NZ with a Compliance Notice for failing to comply (at the time of the cyber attack in December 2025) with the security requirements of rule 5 of the Health Information Privacy Code.

The Notices were issued following the Commissioner’s Phase 1 Report (May 2026) into Manage My Health’s cyber incident in late December 2025. 

Read the media release about issuing the Compliance Notices.

Read the Health NZ Compliance Notice, due on 12 February 2027 [PDF, 327 KB] (opens to PDF, 327KB).

Read the Manage My Health Compliance Notice, due on 27 March 2027 [PDF, 294 KB] (opens to PDF, 294KB).

Catch up on information about the Manage My Health cyber attack in our Focus Area.

Privacy Commissioner sets expectations about smart glasses

Smart glasses are one of the latest technological developments exciting consumers, but they have significant privacy considerations. The Privacy Commissioner has outlined his expectations of their use to ensure New Zealanders are acting within the law and not creating harm through their use of the glasses. 

Smart glasses add digital technology into ordinary-looking eyewear, including to record photos or video. Using Bluetooth and working with an AI app, they can recognise and describe images, scenes, and environments. Like many technological developments, they’re becoming cheaper and more available and sales are increasing globally.

Privacy Commissioner Michael Webster has several concerns about smart glasses. Read the full story.

Privacy concerns are no longer niche worries

Issues like AI decision-making, facial recognition, and children's digital lives are now firmly mainstream concerns, rather than niche ones, according to the latest privacy survey. 

“The increasing use of technology is leading more New Zealanders to ask questions about the amount of personal information being collected about them, what it’s being used for, and how it’s being kept safe from misuse”, Privacy Commissioner Michael Webster says.

This year’s top three concerns are children's privacy including social media use (71% concerned, up 4%); government agencies and businesses using AI to make decisions about people using personal data (67% concerned, up 5%); and the management of personal information by social media companies (65% concerned, up 2%). 

“These issues remain unchanged from 2025, which shows that privacy issues linked to these topics are becoming entrenched in people’s minds as something to worry about”, said Mr Webster.

Read the full results of our 2026 privacy survey.

Read our media release about our new survey.

Make a privacy complaint

We're keen to work with New Zealanders to get their privacy queries and complaints sorted quickly and fairly. Before you complain to us, you need to complain directly to the business or organisation that you feel has breached your privacy.

If you haven’t been able to work out your privacy issue with them, then you can complain to us. We aim to ensure that you're treated fairly, whatever your background or circumstances. We work in accordance with the Human Rights Act 1993.

• Read our tips about using AI to contact us
• Lodge a privacy issue with another agency(external link).
• Use our Response Date Calculator for access and correction requests.
• Answer your questions about privacy breaches.
• Make a privacy complaint to us(external link).

Being affected by a privacy breach can be distressing and emotionally harmful. Read about managing your mental distress.

We review all the complaints we receive. If we can resolve them quickly, we will. If your case requires a complicated or comprehensive investigation, then owing to high volumes, the wait time for an investigator is at least six months, and likely longer. Another agency may be able to help you quicker than that. See our list of other dispute resolution schemes. 

Use our free e-learning tools

We can help you and your workmates learn about privacy, or sharpen your skills with our free e-learning tools. There are 10 free courses to choose from, and they are all run as online learning modules. Learn at your own pace and receive a certificate of completion.

Topics range from Privacy 101 to specialist topics like health and education. You can learn more about reporting privacy breaches, approved information sharing agreements (AISA) and more.

Get learning with our e-learning modules.

Our news and views

Read our latest media releases and news.

Subscribe to Privacy News, our free monthly newsletter.

See case notes and court decisions.

Order free brochures for your customers or clients.

Come and work with us

When you work here you’re serving New Zealanders and their right to privacy. We’re a small but mighty Office full of well-read people who are interested in the world and what happens in it. Kindness matters here, which creates a great place to work. Find out more about working here, check for vacancies, and read about our recruitment process.