A Ministry of Health email blunder has spilled private medical information of more than 24,000 New Zealanders.
Officials are investigating how a spreadsheet of National Health Index (NHI) numbers, containing the birth and death dates of 24,092 people, was emailed to around 950 pharmacists yesterday morning. The email was supposed to be sent internally.
Security on NHI numbers is extremely high, with access restricted to health professionals and agencies governed by the Health Information Privacy Code.
Access to the data, which also includes gender and location details, is comprehensively logged and subject to a signed agreement, with the system recording details each time an NHI is looked at -- including which NHI, who looked at it, when and what they did with it. An audit programme monitors whether access was justified and whether it was used for legitimate purposes.
In a statement to the New Zealand Herald, information director Graeme Osborne said the ministry "understands that the public rightly expects that any health information, even information which has been protected, should be held secure".
The ministry has apologised for the mistake, saying any unintended release of information - even if it is coded and to a group of health professionals - is unacceptable.
"The information related to 24,092 individuals who had passed away in the six months from January this year," a spokesman said.
"As soon as the error was made, a second email was sent asking the recipients to delete it.
"The ministry already has precautions in place to prevent mistakes like this from occurring and the first step in its investigation will be to check why those precautions failed in this instance."
A number of Government agencies have admitted privacy breaches over the last three years.
In 2013, a major breach by the Earthquake Commission saw details of more than 80,000 claimants sent to the wrong email address.
The commission also sent a claimant an email with an attached spreadsheet with 2200 names, stopped cheque details and claim amounts worth about $23 million.
Also in 2013
* The Ministry of Education owned up to a staff member who attached the wrong letter to an email
* Immigration New Zealand sent two emails with client email addresses to more than 200 advisers, lawyers and individuals
* The Ministry for the Environment sent about 150 people each other's private email address
* And a Hawkes Bay District Health Board worker mistakenly released a patient's confidential medical file to the media.
nzme sp cr
