Resources and learning
Health information privacy is about making sure patients and staff know what's being done with their health information, and why. Collecting, using and disclosing health information to provide care should never be a problem.
Health Information Privacy Code (HIPC)
The Health Information Privacy Code applies specific rules to agencies in the health sector to better ensure the protection of individual privacy. It covers health information collected, used, held and disclosed by health agencies and takes the place of the information privacy principles for the health sector. The Health Information Privacy Code applies to the health information about identifiable individuals and applies to:
- all agencies providing personal or public health or disability services such as primary health organisations, rest homes, supported accommodation, doctors, nurses, dentists, pharmacists and optometrists; and
- some agencies that do not provide health services to individuals, but which are part of the health sector such as ACC, the Ministry of Health, the Health Research Council, health insurers and professional disciplinary bodies.
See our Health Information Privacy Code summary factsheets.
Serious threat to life, health, or safety
Sometimes releasing information to a requester may pose a serious threat to someone's life, physical or mental health or safety: either the requester, an employee of the organisation releasing the information, another person, or the wider public. If there is evidence of a serious threat to someone's life, health or safety, an organisation can withhold the information requested. Read more about access to personal information.
Prejudice physical or mental health
Occasionally, giving people access to information about themselves can be actively harmful to them.
Where an organisation believes that giving someone access to their information could harm their physcial or mental health, it may be able to withhold the information.
Before the organisation can do this, it needs to show:
- the information is about the person in question
- it has discussed whether it is advisable to release the information with the person's medical practitioner
- the medical practitioner believes that there's a real risk releasing the information could damage the person's physical or mental health
Read more about prejudice physical or mental health.
Can I withhold information to protect someone’s life, health or safety?
Free online health privacy training
We offer free online learning modules on a range of privacy-related topics. You will receive a certificate of completion once you’re finished. This is good annual training for staff working in health.
Health ABC
A 30-minute introduction to privacy under the Health Information Privacy Code. Many health professionals do this training every year to brush up on the basics of health privacy. You’ll be asked to answer questions about scenarios where patient information or privacy is involved. We’ll show you the answers so you can see how you went and help you learn from your mistakes as you go.
Health 101 - an introduction to the Health Information Privacy Code
An in-depth introduction to the Health Information Privacy Code (HIPC). You will learn about the main ideas in the HIPC like safe collection, storage, and disposal of personal information and how to handle privacy breaches. You’ll see how these ideas are applied in case studies and look at scenarios to decide if the right or wrong approach has been taken.
Other information and examples related to health
Health on the road
Heath practitioners need to keep patient information safe when they're traveling and working remotely. Our Health on the road guidance aims to help you keep health information safe when you're off-site or on the road. Learn more about health on the road.
Resources for your clinic
Did you know you have privacy rights? Is a bilingual brochure for the public about their privacy rights, including their health information rights. Order these for free by emailing commsteam@privacy.org.nz
Health-related privacy case notes:
Health-related High Court case
