The use of patient health information in secondary research (henceforth referred as health information research) has many potential health and economic benefits for New Zealand, but patient privacy must be protected in the process. In this letter, we describe some exciting recent developments in data de-identification and international privacy law, and how these might impact health information research in New Zealand.