The privacy commissioner has recommended a central vetting process for GP apps, following the Manage My Health data breach. It found Health NZ and Manage My Health "failed in their responsibilities" to have adequate security controls when hundreds of thousands of medical files were stolen in a cyber attack. The Commissioner says GP practices need to review their security settings and third party providers. Luke Bradford, President and Chair of the Royal New Zealand College of General Practitioners spoke to Ingrid Hipkiss.