Understand Your Risk.
Protect Patient Trust.
Get Compliant.
GPNZ Cybersecurity Compliance for General Practice
Get your practice ready for the April 2027 cybersecurity requirements.
General Practice New Zealand (GPNZ) has introduced a new Cyber Security Checklist for healthcare providers accessing and sharing information with Health New Zealand systems. Practices are expected to implement the required controls and supporting documentation by April 2027.
For many practices, the challenge is not the technology itself. It is understanding the requirements, determining who is responsible for each control, gathering evidence from multiple suppliers, and producing the documentation needed to demonstrate compliance.
CyberAudit helps practices simplify the process.
How can CyberAudit help?
Our healthcare compliance specialists work alongside your practice to:
Review the GPNZ cybersecurity requirements
Assess your current security posture
Identify areas that already meet the requirements
Document gaps and remediation recommendations
Help prepare the policies, procedures and registers required for compliance
Gather technical evidence from IT providers and vendors
Coordinate responses from PMS vendors and other suppliers
Develop a remediation roadmap to April 2027
Produce a complete assurance and compliance pack for management approval
The result is a structured, auditable framework that helps demonstrate your practice's cyber security maturity and compliance obligations.
I’m not sure where to start with all this?
Meeting the new requirements involves your practice, IT provider, PMS provider and other technology suppliers. CyberAudit helps you understand what is required, identify what is already in place, gather the supporting evidence and address any gaps before April 2027.
Are you going to just give us another checklist to complete?
No, completing a checklist is relatively easy. Being able to demonstrate that the answers are correct is the important part. CyberAudit focuses on creating an evidence-based compliance framework that your practice can maintain over time.
At the end of the process, your practice has:
A completed assessment against the requirements
Clearly assigned responsibilities
Supporting evidence
Required policies and procedures
Identified security gaps
A documented remediation plan
A framework for annual review
Formal management approval and sign-off
This means the work remains useful long after the initial compliance exercise is completed.
Will You Work With My Existing IT Provider?
Absolutely! You don't need to change IT providers to work with CyberAudit.
CyberAudit can work independently with your practice and your existing IT, PMS and technology providers.
We determine what evidence is needed, identify which supplier is responsible for providing it, and help bring the information together into a single structured compliance framework.
Where your existing provider already has appropriate controls in place, we document them rather than recommending unnecessary change.
It's Time to Understand Your Cybersecurity Risk
Speak with us today about an Independent Healthcare Cybersecurity Assessment and gain a clearer understanding of your organisation's cybersecurity risk.
