Health Record Rights Index · country brief · this country's data as of October 2, 2026

Who holds the health record in New Zealand?

In 2026, New Zealand scores 48 out of 100 for how much say a person has over their own health record. It is tied for 55th of 198 countries and territories, and could rank anywhere from 46th to 82nd allowing for scoring error, in the Mixed band (45 to 64). Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026.

The person has real controls inside a government or provider system. Its strongest right, compared with the typical country, is control over who sees it (47 out of 100, against 30 for the typical country). No right falls below the typical country; the closest to it is one record across your care (40 out of 100, against 38 for the typical country).

New Zealanders get records free from public agencies, but the national shared record is not live and a 2025 portal hack exposed nearly 100,000 patients.

Published · updated · this country's data as of October 2, 2026 · research tool, not legal advice

overall score · Mixed band, 45 to 64
48/100
rank among 198 countries and territories; likely 46th to 82nd, allowing for scoring error
Tied for 55th
confidence in our evidence
High
strength of our evidence (DTI™)
88/100 (Gold)

Questions people ask

Can I see my health record in New Zealand?

In 2026, getting your full record scores 55 out of 100 in New Zealand; the typical country scores 40 to 45. The health privacy code gives a right to your records within 20 working days, free from public agencies. The national My Health Record shows only immunisations, COVID-19 results and some identity details; fuller views sit in private GP portals. Source: Office of the Privacy Commissioner, and the other sources below.

Who controls health records in New Zealand?

In 2026, you and the health system hold the keys to your health record in New Zealand. Control over who sees it scores 47 out of 100 in New Zealand; the typical country scores 30. Today choices are narrow: people can restrict their national immunisation record, and some regional shared records allow opt-out. The national Shared Digital Health Record, with opt-out, item blocking and access summaries, has not started sharing. Source: Health New Zealand, August 7, 2026, and the other sources below.

How does New Zealand compare?

In 2026, New Zealand scores 48 out of 100, against 39 for the typical country. This brief compares it with Tonga (46 out of 100), Nauru (42 out of 100) and Vanuatu (34 out of 100). Source: the ranking of all 198 countries and territories.

Eight rights, compared with Tonga, Nauru, Vanuatu and the typical country

Scores out of 100, by right
Getting your full record20%5545 · 28 · 45
Control over who sees it20%4742 · 35 · 32
Privacy and security15%5045 · 38 · 45
One record across your care15%4058 · 65 · 22
Protection from sale and ads10%5240 · 40 · 35
Doctors see it when treating you10%4060 · 68 · 18
Your say over research use5%5046 · 50 · 46
Rules for AI in your care5%4020 · 20 · 22

Black dot: New Zealand. Hollow dots: Tonga, Nauru, Vanuatu (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Overall: New Zealand 48 out of 100. Scores move in steps of about 5 points, so read a rank with its likely range.

What would New Zealand need to change to score higher?

New Zealand sits in Mixed (45 to 64); Strong starts at 65. Every right is at or above the typical country. The two with the most room to grow, weighted by how much each counts, are control over who sees it (47 out of 100, against 30 for the typical country) and one record across your care (40 out of 100, against 38 for the typical country). Our scoring rules give more points for:

  • Control over who sees it: A way to say no to sharing (or to be asked first), a log you can read of who opened your record, and finer choices about who sees what. Together these put this right at 60 to 80 out of 100.
  • One record across your care: Family doctors, hospitals, labs, pharmacies, insurers and public health all linked to one record that is used across the country.

Which laws give health record rights in New Zealand?

  • Privacy Act 2020: General privacy law; breach notification, compliance notices, fines up to $10,000 for failing to notify.
  • Health Information Privacy Code 2020: Health-specific rules on collection, security, access, charges and disclosure for health agencies and insurers.
  • Health Information Privacy Code 2020 Amendment No 2 (2026): Adds rule 3A: tell people when health data is collected from someone else. In force 1 May 2026.

Doctors, waits and private care context, not part of the score

Doctors per 10,000
37.7 2024 · 19th highest of 38 OECD countries
Nurses and midwives per 10,000
131 2024 · 7th highest of 38 OECD countries
Private insurance + out-of-pocket
17.5% 2023 · 24th highest of 35 OECD countries
Record reaches private care?
partly
"radiology reports (hospital imaging and private reports copied to the system)"

Real cases

  • June 16, 2025 · Office of the Privacy Commissioner (New Zealand), Case Note 329225 [2025] NZ Priv Cmr 1 Agency mailed a person's health information to the wrong house
  • September 23, 2026 · Stuff Portal and Health NZ ordered to fix security after 99,416 patients' data exposed

Compare New Zealand

Cite this brief

In 2026, New Zealand scored 48 out of 100 for how much say a person has over their own health record, tied for 55th of 198 countries and territories (could be 46th to 82nd), in the Mixed band. Who holds the keys: you and the health system. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026, https://healthrecordrights.com/brief/new-zealand/

The 22 sources for New Zealand

Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.

Getting your full record (4 sources)

  1. “Ask for your information”

    Office of the Privacy Commissioner (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.privacy.org.nz/your-rights/ask-for-your-information/

  2. “Charging for access to personal information”

    Office of the Privacy Commissioner (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.privacy.org.nz/responsibilities/charging-for-access-to-personal-information/

  3. “About My Health Account”

    Health New Zealand (government guidance) · Title in English

    Dated July 22, 2026 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.healthnz.govt.nz/websites-and-apps/my-health-account/about-my-health-account

  4. “Manage My Health data breach: a timeline of what happened”

    RNZ (news) · Title in English

    Dated January 14, 2026 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.rnz.co.nz/news/crime-and-justice/584053/manage-my-health-data-breach-a-timeline-of-what-happened-and-everything-we-know-so-far

Control over who sees it (4 sources)

  1. “Privacy: Shared Digital Health Record”

    Health New Zealand (government guidance) · Title in English

    Dated August 7, 2026 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; One record across your care; Doctors see it when treating you

    https://www.healthnz.govt.nz/privacy/wider-sharing-of-your-health-information/privacy-shared-digital-health-record

  2. “Restricted access to records in the AIR”

    Health New Zealand (government guidance) · Title in English

    Dated May 21, 2026 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Your say over research use

    https://www.healthnz.govt.nz/health-professionals/guidance-standards/topic/immunisation/aotearoa-immunisation-register-air/restricted-access-to-records-air

  3. “Shared Electronic Health Record: frequently asked questions”

    sehr.org.nz (other) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Doctors see it when treating you

    https://sehr.org.nz/frequently-asked-questions/

  4. “Supporting your care with shared health information”

    Health New Zealand (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Doctors see it when treating you

    https://www.healthnz.govt.nz/privacy/wider-sharing-of-your-health-information

Privacy and security (4 sources)

  1. “Privacy Commissioner releases Phase 1 Inquiry into Manage My Health cyber incident”

    Office of the Privacy Commissioner (regulator) · Title in English

    Dated May 27, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security; Protection from sale and ads

    https://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-finds-manage-my-health-and-health-nz-breached-privacy-act/

  2. “Privacy Commissioner issues Compliance Notices to Manage My Health and Health NZ”

    Office of the Privacy Commissioner (regulator) · Title in English

    Dated September 23, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-issues-compliance-notices-to-manage-my-health-and-health-nz/

  3. “NotifyUs: evaluate a privacy breach”

    Office of the Privacy Commissioner (regulator) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.privacy.org.nz/responsibilities/privacy-breaches/notify-us/evaluate

  4. “Calls to strengthen New Zealand's Privacy Act grow amid an increasing number of major breaches”

    IAPP (news) · Title in English

    Dated March 5, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security; Protection from sale and ads

    https://iapp.org/news/a/calls-to-strengthen-new-zealand-s-privacy-act-grow-amid-an-increasing-number-of-major-breaches

One record across your care (3 sources)

  1. “Shared Digital Health Record update: July 2026”

    Health New Zealand (government guidance) · Title in English

    Dated July 9, 2026 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.healthnz.govt.nz/news-and-updates/shared-digital-health-record-update-july-2026

  2. “e-Medicines programme”

    Health New Zealand (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.healthnz.govt.nz/about-us/what-we-do/programmes-and-initiatives/e-medicines-programme

  3. “Pharmaceutical collection”

    Health New Zealand (government guidance) · Title in English

    Dated July 22, 2026 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.healthnz.govt.nz/about-us/health-data/data-sets-and-collections/national-collections/pharmaceutical-collection

Protection from sale and ads (1 source)

  1. “Health Information Privacy Code 2020”

    Privacy Commissioner (law or regulation) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Protection from sale and ads; Doctors see it when treating you; Your say over research use

    https://www.privacy.org.nz/assets/Codes-of-Practice-2020/Health-Information-Privacy-Code-2020-website-version.pdf

Your say over research use (2 sources)

  1. “National Ethical Standards, 7. Informed consent”

    National Ethics Advisory Committee (government guidance) · Title in English

    Dated March 30, 2026 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://neac.health.govt.nz/national-ethical-standards/part-two/7-informed-consent/

  2. “How we keep integrated data safe”

    Stats NZ (government guidance) · Title in English

    Dated August 23, 2022 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://www.stats.govt.nz/integrated-data/how-we-keep-integrated-data-safe/

Rules for AI in your care (4 sources)

  1. “Explanation of the WAND database”

    Medsafe (regulator) · Title in English

    Dated May 10, 2011 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.medsafe.govt.nz/regulatory/devicesnew/3-2Explanation.asp

  2. “Using generative AI and large language models”

    Health New Zealand (government guidance) · Title in English

    Dated May 21, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.healthnz.govt.nz/health-professionals/guidance-standards/topic/digital-technologies/using-generative-ai-and-large-language-models

  3. “Artificial Intelligence and Algorithm Expert Advisory Group”

    Health New Zealand (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.healthnz.govt.nz/about-us/who-we-are/expert-groups-and-networks/expert-groups/artificial-intelligence-and-algorithm-expert-advisory-group

  4. “Medical Products Bill to introduce risk-based framework for software and AI regulation”

    eHealthNews.nz, HiNZ (news) · Title in English

    Dated May 12, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.hinz.org.nz/news/727150/Medical-Products-Bill-to-introduce-risk-based-framework-for-software-and-AI-regulation-.htm

Something wrong on this page? Tell us.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai
Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/new-zealand/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.