Michael Webster says it is clear a privacy investigation is needed given the scale of the incident, the sensitivity of the information and some of the systemic issues that were identified.

He said the inquiry
would help determine whether Manage My Health had appropriate security safeguards and, if not, why not.

It would also look at what steps would be taken to prevent such an incident happening again.

At the end of December, Manage My Health confirmed it had been hacked, later revealing that information of about 120,000 users could be affected.