Latest / Early Edition with Ryan Bridge / Bevan McKenzie: Health NZ Chief Financial Officer on the inquiry into the Manage My Health cyber-attack

Transcript

Bevan McKenzie: Health NZ Chief Financial Officer on the inquiry into the Manage My Health cyber-attack · Early Edition with Ryan Bridge

• 0:00
  Speaker 1: Remember to manage my health cyber stuff the stuff up
• 0:03
  Speaker 1: privacy commissioners, is health insier to manage my health, failed
• 0:06
  Speaker 1: to protect down data, not enough security safeguards. As the
• 0:09
  Speaker 1: whole of health in z in our needs basically to
• 0:11
  Speaker 1: clean up its za's Bevan Mackenzie, chief financial officer at
• 0:14
  Speaker 1: Health ENZ, joins me this morning. Hey Bevan, good morning.
• 0:17
  Speaker 2: Right.
• 0:17
  Speaker 1: A bit of a cockup, wasn't it. Did you find
• 0:20
  Speaker 1: out where the data went or who took it.
• 0:23
  Speaker 2: Of? The first thing to say here, Ryan, is that
• 0:27
  Speaker 2: people rightly expect their health information to be really well secure.
• 0:31
  Speaker 2: That didn't happen sufficiently in this case. Health New Zealand
• 0:34
  Speaker 2: recognizes that and apologizes to people impacted by it. That
• 0:40
  Speaker 2: cyber actor is one of many, Ryan, they're increasingly sophisticated.
• 0:43
  Speaker 2: We need to be increasingly vigilant.
• 0:45
  Speaker 1: Do we know who they are?
• 0:48
  Speaker 2: There's been a lot of work done on that. That's
• 0:49
  Speaker 2: not really for Health New Zealand to comment. What we're
• 0:52
  Speaker 2: really focused on, Ryan, is there are a lot of
• 0:55
  Speaker 2: key recommendations and these reports about how we get better
• 0:58
  Speaker 2: improving the security of key health information.
• 1:01
  Speaker 1: Yeah, fair enough. We'll come to that in a second.
• 1:02
  Speaker 1: But do you know who it is or not.
• 1:06
  Speaker 2: Again, there was a good work done on that. That's
• 1:08
  Speaker 2: that's not really for Health and Zealand to comment. Why
• 1:12
  Speaker 2: not security?
• 1:13
  Speaker 1: I mean why not that the health information is our
• 1:15
  Speaker 1: health information, your health New Zealand. It seems reasonable for me,
• 1:18
  Speaker 1: if you know who did this, you would tell us
• 1:20
  Speaker 1: who it is. I mean, where are they from?
• 1:24
  Speaker 2: Again, that's that's information that's been widely reported Ryan. What
• 1:29
  Speaker 2: Health and Zealand is what we're focused on.
• 1:31
  Speaker 1: What was that?
• 1:33
  Speaker 2: Again? We're very focused on protecting key is health information.
• 1:37
  Speaker 1: That wouldn't it be good for good good to know
• 1:39
  Speaker 1: where the people who are taking the information are coming
• 1:41
  Speaker 1: from if you're going to protect us from them.
• 1:44
  Speaker 2: Well, this act of Ryan was one of many who
• 1:47
  Speaker 2: seek to get access to health information. It really is
• 1:51
  Speaker 2: a wake up call to ensure that the security that's
• 1:54
  Speaker 2: in place is top notch. And what these reports have
• 1:57
  Speaker 2: found is that wasn't the case. And you know a
• 1:59
  Speaker 2: lot of North in particular, we're affected by that. Ryan.
• 2:03
  Speaker 2: We need to do better and ensuring that that health
• 2:05
  Speaker 2: information is absolutely secure.
• 2:07
  Speaker 1: Against is it secure right now?
• 2:11
  Speaker 2: I think what these reports show is that there's been
• 2:12
  Speaker 2: a lot of improvements made health New Zealands invested significantly
• 2:16
  Speaker 2: in its cyber over the past a few years. We
• 2:18
  Speaker 2: had a twenty four seven National Security Operations Center. We
• 2:22
  Speaker 2: spent about fifty million dollars per year on our cybersecurity.
• 2:26
  Speaker 2: The reports say that there are a lot of improvements
• 2:28
  Speaker 2: made both by Health and Zealand also by Manage my
• 2:31
  Speaker 2: Health and by the primary care sector that we work
• 2:34
  Speaker 2: closely with. The reports also say that there's more that
• 2:37
  Speaker 2: needs to be done and it's important that it is.
• 2:40
  Speaker 1: Vivin, I'm not asking what the report's saying. I'm asking
• 2:43
  Speaker 1: you is our data safe right now or not?
• 2:46
  Speaker 2: We think keys can have confidence in that, Ryan, Do
• 2:49
  Speaker 2: you have comp yes? Absolutely? Well?
• 2:54
  Speaker 1: Can I just ask what happens, Vivian? If I tell
• 2:56
  Speaker 1: my doctor something, or I go to hospital and I
• 2:59
  Speaker 1: have a conversation with the surgeon or whatever. That stuff's
• 3:02
  Speaker 1: often recorded. It's often recorded by AI. Where does it
• 3:05
  Speaker 1: go and how many people or how many different organizations
• 3:08
  Speaker 1: will be able to view it.
• 3:11
  Speaker 2: The main lines of you, obviously your local GP GPS,
• 3:15
  Speaker 2: work with patient portals Manage my Health is one that
• 3:19
  Speaker 2: sivil others. That information is subject to really clear standards
• 3:24
  Speaker 2: about how it needs to be treated. One of the
• 3:26
  Speaker 2: things these reports find though, is that there's better assurance
• 3:29
  Speaker 2: it's needed that those standards are being regularly assessed and
• 3:33
  Speaker 2: upheld by anyone who gets that health information right.
• 3:37
  Speaker 1: So if so, if I go to the hospital talk
• 3:39
  Speaker 1: to the doctor, there the only other person that would
• 3:42
  Speaker 1: see that as my GP. No one else is able
• 3:45
  Speaker 1: to access that data.
• 3:47
  Speaker 2: Yeah, there are really clear rules around who can get
• 3:49
  Speaker 2: access to that data. We take that responsibility very seriously.
• 3:53
  Speaker 1: Right out again, Bevin. Sorry, just to clarify, who are
• 3:58
  Speaker 1: the people that are allowed to look at it?
• 4:00
  Speaker 2: Yeah, it's your health professional, Ryan. And then when there
• 4:04
  Speaker 2: are third parties portals for example, there are really clear
• 4:08
  Speaker 2: rules around how that data can be accessed and how
• 4:10
  Speaker 2: it can be how it can be used.
• 4:12
  Speaker 1: So how many third party portals are there?
• 4:16
  Speaker 2: There are a handful of third party portals in New Zealand.
• 4:19
  Speaker 2: Ryan managed my Health obviously as one of them. There
• 4:21
  Speaker 2: are a few others. They play a really important role
• 4:25
  Speaker 2: in the sector. They improve the way keywis can get
• 4:27
  Speaker 2: access to their data. But it's got to be safe
• 4:29
  Speaker 2: and these reports again say that there's more that need
• 4:32
  Speaker 2: to be done to ensure that that's the case.
• 4:34
  Speaker 1: I appreciate your time this morning. Bevin McKenzie Health n
• 4:37
  Speaker 1: Z chief financial Officers for.
• 4:39
  Speaker 2: More from Early Edition with Ryan Bridge.
• 4:41
  Speaker 1: Listen live to News Talks at B from five am weekdays,
• 4:45
  Speaker 1: or follow the podcast on iHeartRadio