Health Information Privacy Statement

Access to your health information

Under Rules 6 and 7 of the Health Information Privacy Code 2020, you are entitled to request access to your health information and to ask for it to be corrected if necessary.

Visiting another GP

If you see a GP who is not your usual doctor, you may be asked for permission to allow details from that visit to be shared with your regular doctor or medical practice.

If you hold a Community Services Card and visit a GP other than your usual doctor, that doctor may claim a subsidy for the consultation. In that case, the practice where you are enrolled will be advised of the date of your visit. However, the name of the practice you attended and the reason for your visit will not be shared unless you consent to that disclosure.

Patient enrolment information

Information you provide in your Practice Enrolment Form may be:

  • retained by the practice;

  • used by the Ministry of Health to assign you a National Health Index (NHI) number, or to update your existing NHI details;

  • provided to the Primary Health Organisation (PHO) and the Ministry of Health so subsidised funding can be claimed on your behalf; and

  • used to assess whether you qualify for publicly funded health services.

Where permitted by the Privacy Act, this information may also be checked against information held by other government agencies.

Health information

Members of your healthcare team may:

  • add information to your health record whenever they provide services to you, and use that information to support your care; and

  • share relevant health information with other health professionals who are directly involved in your treatment or care.

Use of Artificial Intelligence (AI)

Members of your healthcare team may use artificial intelligence (AI) tools as part of the services they provide to you.

  • AI may be used by clinicians to help record medical information accurately and support a full and precise record of your care.

  • AI will only be used during your consultation if you have first given your consent.

  • You may withdraw your consent to the use of AI at any time.

  • Any AI system used is required to comply with the Privacy Act 2020 and the New Zealand Information Privacy Principles.

Audit

If the practice is subject to a financial audit, your health information may be reviewed by an auditor for the purpose of verifying a financial claim made by the practice. Any such review will only take place in accordance with section 22G of the Health Act, or any later legislation that applies.

You may also be contacted by the auditor to confirm that services were provided to you. Where an audit requires review of clinical matters, only a suitably qualified health practitioner will examine the relevant health records.

Health programmes

If you are enrolled in a health programme, such as breast screening, immunisation, or diabetes care, relevant health information may be shared with the PHO or with the external agency responsible for administering that programme.

Other uses of health information

Your health information may also be used by health agencies such as Te Whatu Ora, Te Aka Whai Ora, the Ministry of Health, or your PHO for purposes including:

  • planning and reporting on health services;

  • monitoring and improving service quality; and

  • payment processing.

In these cases, your name will not be included, although your NHI may be used. The information must not be used or published in a way that identifies you.

Research

Your health information may only be used for health research if:

  • you have given your written consent under Right 9 of the Code (Rights in respect of teaching or research);

  • the research has been approved by an Ethics Committee; and

  • the information will not be used or published in a way that identifies you.

Confidentiality

Except in the circumstances set out above, information about your health condition and the services you receive will remain confidential within the medical practice unless you give specific consent for that information to be shared.

I can also make this one more polished and website-ready so it matches the privacy policy wording and style.