Privacy fact sheet

Privacy fact sheet

Use and confidentiality of your health information

Your privacy and confidentiality will be fully respected. This fact sheet sets out why we collect your information and how that information will be used.


We collect your health information to provide a record of care. This helps you receive quality treatment and care when you need it. We also collect your health information to help:

  • you manage your own health
  • keep you and others safe
  • plan and fund health services
  • train health care professionals
  • prepare and publish statistics
  • improve our services.

Confidentiality and information sharing

Your privacy and the confidentiality of your information is really important to us.

  • Your health practitioner will record relevant information from your consultation in your notes.
  • Your health information will be shared with others involved in your health care and with other agencies with your consent, or if authorised by law.
  • You don’t have to share your health information, however, withholding it may affect the quality of care you receive. Talk to your health practitioner if you have any concerns.
  • You have the right to know where your information is kept, who has access rights, and, if the system has audit log capability, who has viewed or updated your information.
  • Your information will be kept securely to prevent unauthorised access.

Information quality

We’re required to keep your information accurate, up to date and relevant for your treatment and care.

Right to access and correct

You have the right to access and correct your health information.

  • You have the right to see and request a copy of your health information. You don’t have to explain why you’re requesting that information, but may be required to provide proof of your identity. If you request a second copy of that information within 12 months, you may have to pay an administration fee.
  • You can ask for health information about you to be corrected. Our clinical staff should provide you with reasonable assistance.

Use of your health information

Below are some examples of how your health information is used.

  • A clinical audit may be conducted by a qualified health practitioner to review the quality of services provided to you. They may also view health records if the audit involves checking on health matters.
  • In the event of an adverse outcome, or a complaint being made, your health records could be reviewed and/or supplied to an external agency such as the Coroner, the Health and Disability Commissioner, or an expert.
  • The Ministry of Health uses your demographic information to assign a unique number to you on the National Health Index (NHI). This NHI number will help identify you when you use health services.
  • The Ministry of Health holds health information to measure how well health services are delivered and to plan and fund future health services. Auditors may occasionally conduct audits of Crest Hospital. The auditors may review your records and may contact you to check that you received satisfactory services.


Your health information may be used in research approved by an ethics committee or when it has had identifying details removed.

  • Research which may directly or indirectly identify you can only be published if the researcher has previously obtained your consent and the study has received ethics approval.
  • Under the law, you are not required to give consent to the use of your health information if it’s for unpublished research or statistical purposes, or if it’s published in a way that doesn’t identify you.


It’s okay to complain if you’re not happy with the way your health information is collected or used.

Talk to your health provider in the first instance. If you are still unhappy with the response you can call the Office of the Privacy Commissioner toll-free on 0800 803 909, as they can investigate this further.

For further information

Visit to access the Health Act 1956, Official Information Act 1982 and Privacy Act 2020.

The Health Information Privacy Code 1994 is available at You can also use the Privacy Commissioner’s Ask Us tool for privacy queries.

A copy of the Health and Disability Committee’s Standard Operating procedures can be found at

TOP arrow