Important Security & Privacy Updates to Your Patient Portal

Masterton Medical is strengthening the security and privacy settings of our patient portal. These updates form part of our ongoing security review and reflect increased health-sector expectations.

Multi-Factor Authentication (MFA) Now Required

From Friday, all patient portal users will be required to use Multi-Factor Authentication (MFA).
Each time you log in, a One Time Code (OTC) will be sent to your phone or email. You must enter this code to access your account.

Why MFA is being introduced:

  • Health information requires strong protection under the Privacy Act and Health Information Privacy Code
  • Security expectations have increased across the health sector
  • MFA significantly reduces the risk of unauthorised access

This requirement applies to all users.

Updated Privacy Settings — More Transparency and Control

New privacy settings are being introduced within the portal.
You can choose whether the portal:

  • Displays your medical summary
  • Displays your consultation notes
  • Securely stores health information retrieved for viewing (“Storage consent”)

These settings control what information is displayed in your portal. They do not give Vensa staff access to your health information.

How Storage Works

If you enable storage, information retrieved with your consent may be securely kept within the portal so you can view it again later.
If you turn storage off or remove access to a category, the portal will begin removing that stored information from your account.
Some limited records of actions you take in the portal (such as booking an appointment or requesting a prescription) are kept to support safe clinical care and administration.

What This Means for You

These updates provide:

  • Stronger login protection
  • Clearer privacy controls
  • Greater transparency about how portal information is handled

If you prefer not to use the portal, you may continue to manage your care by contacting our reception team directly.

As with any online service, there is always a small amount of unavoidable risk.
We take extensive steps to protect your information, but no system can ever be 100% risk‑free.
If you prefer not to use the portal, you can continue to manage your care by contacting our reception team directly.

If you need assistance, please contact us at [email protected] or Vensa at [email protected]

 

Leave a reply