The Privacy Commissioner says health authorities must speed up and tell people whether their hacked data has been leaked.
Agencies are scrambling to address a cyber attack that has crippled Waikato hospitals and stolen the details of thousands of patients and staff.
John Edwards says people need to know whether their details are vulnerable so they can take action.
He is warning District Health Boards they need to patch up IT weaknesses or face possible prosecution and fines.
He spoke to Susie Ferguson.
