OneHealth Update re 12-month Repeat Prescribing and Manage My Health Security Breech

Repeat Prescribing:

The government has changed prescription laws, to allow 12 months’ scripts, which will come into effect February 2026.

This law gives our GPs the legal ability to prescribe 12 months’ worth of medications. However, the actual duration of the script will be based on the nature of the medical condition and safety considerations for each individual patient.

12-month prescriptions will only be suitable for a small number of patients, on certain medications, whose condition is stable and does not need frequent monitoring. Prescriptions for controlled substances are not included. For patients who take multiple medications, or medications that require regular review, blood tests, or dose adjustments, it is unlikely that a full 12-month prescription will be appropriate. In these situations, shorter intervals, such as three or six months will continue to be safer and more consistent with best-practice care.

A general guide to the duration:

  • 12 months – Stable chronic conditions requiring 1 medication.
  • 6 months – Stable chronic conditions requiring multiple medications.
  • 3 months – Controlled Drug medications or review of a newly started medication for a chronic condition.
  • Less than 3 months – newly started medication that require more frequent review.

At your next consult please discuss with your GP the appropriate length for your script.

Manage My Health (MMH) Security Breach

For OneHealth patients registered with the MMH portal:  MMH has experienced a cyber security breech. OneHealth will provide a further update if our patients have been affected by this security breach.  In the meantime, below is the latest update on this breach:

The country’s largest patient information portal, on Wednesday 31 December 2025, confirmed it had identified a cyber security incident involving “unauthorised access” to its platform.

The Health Minister has described the breach of private health records as concerning. However, he says there is no clinical impact on patient care as a result.

Roughly 1.8 million people are registered on the ManageMyHealth portal. The company said between six and seven percent may be affected.

A cyber-crime group claiming to have the data was demanding $60,000 ransom by January 15.

Health Minister Simeon Brown said government agencies were working with ManageMyHealth to fully understand the scope of the breach and to protect the privacy of patients.

“This is a concerning breach of patient data and Health NZ is working closely with ManageMyHealth to ensure it is being appropriately addressed,” he said.

ManageMyHealth will contact patients directly if their medical information has been compromised.

For more information refer:  https://managemyhealth.co.nz/faqs-cyber-breach/