Secondary research using health records and other personal health data (henceforth referred to as health information research) is a valuable tool for tackling New Zealand’s health and social challenges. It requires however suitable privacy standards to maintain public confi dence and social license. The privacy protocols used by New Zealand district health boards have been described in this journal, as have additional safeguards that could be adopted to prevent privacy breaches.¹,²