Source: New Zealand Government
Cyber security across New Zealand’s health system will be significantly strengthened to better protect sensitive patient information and ensure services remain safe and reliable, Health Minister Simeon Brown says.
“Cyber-attacks are a serious and growing threat to health systems around the world, and New Zealand is not immune. That’s why we are taking decisive action to strengthen cyber security, safeguard patient data, and ensure frontline services can continue operating without disruption.”
Budget 2026 will deliver $153.6 million in funding for Health New Zealand to expand national cyber security monitoring, strengthen data security processes, and deliver critical IT safety upgrades across the health system.
The investment includes:
Strengthening 24/7 cyber security monitoring and response capability
Expanding specialist cyber security expertise
Delivering critical security upgrades across health systems
Strengthening cyber security oversight in primary care
Health New Zealand is also investing an additional $300 million to help deliver the first three years of the Health Digital Investment Plan, supporting work such as replacing ageing devices, modernising radiology systems, and upgrading core IT platforms.
Mr Brown says this digital investment package will strengthen protections across the health system while improving the resilience of services New Zealanders rely on every day.
“This is about protecting patients and maintaining trust in our health system. New Zealanders should feel confident their health information is secure and that frontline services are resilient against cyber threats that could otherwise disrupt care.
“With dedicated cyber defence teams monitoring threats around the clock, the risk of disruptions – including cancelled appointments, delayed treatments, or IT outages caused by cyber-attacks – will be reduced.”
Recent incidents have highlighted the need to lift cyber security standards across the health sector, including in primary care.
“Events like the Manage My Health incident were deeply concerning and showed the need for stronger safeguards and tighter oversight of third-party systems.
“This investment responds directly by strengthening resilience and improving accountability for managing cyber security risks, so that patients can be assured their health information is being safeguarded across the health system.”
Over the next year, Health New Zealand will implement a programme to identify and manage cyber risks posed by third‑party vendors and systems, strengthen accountability for fixing security risks, introduce annual audits of critical systems, and use scalable tools, including AI-enabled assessments, to improve cyber security maturity across primary care.
“We are focused on fixing the basics and building the future by investing in the systems, tools, and specialist workforce needed to prevent incidents, minimise disruption, and maintain continuity of care.
“This investment strengthens the digital backbone of our health system to better protect patient information, support frontline services, and keep care safe and secure for Kiwis.”
Original source: https://nz.mil-osi.com/2026/05/28/investing-in-cyber-security-to-protect-patient-data/