What specific safeguards, audits or oversight of third-party primary-care IT vendors will the cyber-security funding deliver in 2026/27, if any?

Answer

I am advised that Health New Zealand is undertaking reviews of six private patient portals, which are expected to be completed later in the 2026/27 financial year. These reviews will highlight any needed areas of security uplift in the portal provider. I am further advised that Health NZ is rolling out a cyber-minimum baseline aligned to the National Cyber Security Centre standards. I am also advised that further primary care cyber-security awareness campaigns are planned.