NZ Court Protects Patient Privacy After Cyber Attack

The New Zealand High Court granted an urgent injunction restraining the publication or use of data stolen in a cyber-attack on Manage My Health Ltd's online patient portal. The court held that a strong case was made out that patient data had been exfiltrated unlawfully and for the purpose of ransom. The overall interests of justice clearly favoured protection of confidential information belonging to patients and GP practices in the circumstances. The ruling demonstrates the courts' willingness to act swiftly to protect individual privacy rights in the digital age. The injunction prevents the stolen data from being published or used, which could have led to identity fraud and other harms to patients. This case highlights the importance of protecting sensitive medical information and the courts' role in safeguarding privacy rights when data breaches occur. The decision provides important precedent for similar cases involving stolen personal data. The court's quick action to grant the injunction shows the judiciary's recognition of the serious harm that can result from the publication of stolen medical records and personal information. The ruling protects thousands of patients whose confidential health information was compromised in the cyber-attack.