Our website uses cookies to give you the best experience and for us to analyse our site usage. If you continue to use our site, we will take it you are OK about this. Click on More for information about the cookies on our site and what you can do to opt out.

We respect your Do Not Track preference.

Privacy Act & codes

This code sets specific rules for agencies in the health sector. It covers health information collected, used, held and disclosed by health agencies and takes the place of the information privacy principles for the health sector.

The Health Information Privacy Code applies to the health information about identifiable individuals and applies to:

  • all agencies providing personal or public health or disability services such as primary health organisations, district health boards, rest homes, supported accommodation, doctors, nurses, dentists, pharmacists and optometrists; and

  • some agencies that do not provide health services to individuals but which are part of the health sector such as ACC, the Ministry of Health, the Health Research Council, health insurers and professional disciplinary bodies.

Quick tour of the Health Information Privacy Code rules.

See the consolidated version of the Health Information Privacy Code 1994 incorporating amendments 2-9. View the previous amendments.


Check out our Health Privacy Toolkit for more information.