Demand for health data for secondary research is increasing, both in New Zealand and worldwide. The New Zealand government has established a large research database, the Integrated Data Infrastructure (IDI), which facilitates research, and an independent ministerial advisory group, the Data Futures Partnership (DFP), to engage with citizens, the private sector and non-government organisations (NGOs) to facilitate trusted data use and strengthen the data ecosystem in New Zealand. We commend these steps but argue that key strategies for effective health-data governance remain absent in New Zealand. In particular, we argue in favour of the establishment of: (1) a specialist Health and Disability Ethics Committee (HDEC) to review applications for secondary-use data research; (2) a public registry of approved secondary-use research projects (similar to a clinical trials registry); and (3) detailed guidelines for the review and approval of secondary-use data research. We present an ethical framework based on the values of public interest, trust and transparency to justify these innovations.