The Health Information Privacy Code has been updated with effect from 1 May 2026. The update has introduced a new Information Privacy Principal – IPP3A. This principal requires agencies to take reasonable steps to notify individuals when personal information is collected indirectly (from a third party) unless an exemption applies.
We have updated our Health Information Privacy Statement as a result
Lyttelton Health – Health Information Privacy Statement Effective May 2026
Purpose We collect your health information to provide a record of care and support safe, high quality healthcare services. We may collect information directly from you and, where necessary for your care, from other healthcare providers and organisations involved in your treatment. This helps us maintain an accurate and up-to-date health record and provide safe and effective primary healthcare.
Your information may also be used to:
• Keep you and others safe
• Plan and fund health services
• Carry out authorised research
• Train healthcare professionals
• Prepare and publish statistics
• Improve health and government services Information
We May Collect From Other Sources In order to provide safe and effective healthcare, Lyttelton Health may collect health information about you from other healthcare providers and organisations involved in your care.
This may include:
• Hospitals, emergency departments and specialist services
• Other general practices
• Laboratories, radiology providers and pharmacies
• Allied health and community care providers
• National and regional shared health information systems
• Screening programmes such as bowel, breast and cervical screening
• Health New Zealand | Te Whatu Ora
• ACC
• Employers, insurers, legal representatives, Oranga Tamariki, New Zealand Police and other agencies where authorised by law
• Support persons acting on your behalf
Information obtained from these sources will only be used for purposes related to your healthcare, treatment, administration of services, and where otherwise authorised by law.
Confidentiality and Information Sharing Your privacy and the confidentiality of your information are very important to us. Your health practitioner will record relevant information from your consultations in your medical record. Your information may be shared with other healthcare providers involved in your care, with your consent, or where authorised or required by law. You do not have to provide information to us; however, withholding relevant information may affect the quality and safety of the care we can provide.
Information Security Your information is stored securely using Medtech Evolution and associated systems. We take reasonable steps to protect your information from unauthorised access, loss, misuse, or disclosure. You have the right to know where your information is held, who has access rights, and where available, to request information about access logs and activity relating to your record.
Right to Access and Correct You have the right to access and request correction of your health information. You may request a copy of your health information and may be required to provide proof of identity. An administration fee may apply for repeat requests where permitted by law. If you believe information is incorrect, you may request that it be corrected. If a correction is not made, you may ask for a statement of correction to be attached to your record. Lyttelton Health offers access to the Manage My Health patient portal, which allows patients to view parts of their health record online, request appointments, request repeat prescriptions, and securely communicate with the practice. Some information may not be available through the portal and can be requested directly from the practice. Use of Health Information Your information may be used by Primary Health Organisations, Health New Zealand | Te Whatu Ora, contracted healthcare providers, and authorised agencies for purposes including treatment, funding, quality improvement, auditing, health programme administration, and statutory reporting requirements. Your National Health Index (NHI) number may be used to help identify you when accessing healthcare services.
Research Your health information may be used for approved research where permitted by law. Identifiable information will only be used where appropriate approvals and consent requirements have been met.
Complaints and Privacy Concerns If concerns are raised regarding care or services provided, relevant health information may be disclosed to regulators, insurers, indemnity providers, or legal advisers for the purpose of responding to those concerns.
If you have concerns about how your health information has been collected, used, or disclosed, please contact the practice in the first instance.
Privacy Officer: Practice Manager, Lyttelton Health Phone: 03 328 7309 Email: If you remain dissatisfied, you may contact the Office of the Privacy Commissioner on 0800 803 909.