New Zealand's Privacy Commissioner has found Te Whatu Ora Health New Zealand and Manage My Health Limited failed to meet their responsibilities to protect health information following an inquiry into "one of New Zealand's largest known breaches of sensitive personal information."