The Context
On 18 March 2026, Garry Gorham, a former senior manager at Auckland District Health Board, pleaded guilty to three charges of accepting gifts by an agent and one of disclosing official information. The evidence is stark. Between 2012 and 2014, he accepted $258,541 in undisclosed payments from medical equipment suppliers. In return, he manipulated procurement. The result? Annual payments to one supplier, Alpine, ballooned from $52,000 to $400,000 after his appointment—an eightfold increase. This was not a lapse. It was a sustained, criminal breach of fiduciary duty.
The Risk
This case establishes a clear legal precedent for director liability. The Serious Fraud Office’s successful prosecution pivots on breaches of the Crimes Act 1961 and the Secret Commissions Act 1910. However, the board’s oversight failure is the critical nexus. Under section 137 of the Companies Act 1993, a director must exercise the care, diligence, and skill of a reasonable director. A systemic procurement failure of this magnitude may indicate a collective failure of that duty. The Health and Safety at Work Act 2015 further compounds this. If corrupt procurement compromises patient safety equipment, directors may be personally liable for failing to ensure, so far as is reasonably practicable, the health and safety of workers and others. The maximum penalties are severe: imprisonment and fines exceeding $1.5 million.
The Control
Governance must move from passive policy to active forensic oversight. Implement a mandatory, transparent register for all procurement staff declarations of interest, subjected to random audit by an independent third party. Require dual-authorisation sign-offs for any vendor relationship where spend increases by more than 50% year-on-year. Treat your critical supply chain as a material operational risk, with the board receiving direct, unvarnished reports on audit findings and whistleblower complaints related to procurement integrity.
The Challenge
These are the critical questions you should be raising at the board table:
| Can you demonstrate, with forensic evidence, that our declarations of interest regime is actively audited and has no material gaps for senior personnel in procurement roles? | |
| What specific data analytics and controls are in place to flag and investigate exponential spend increases with a single supplier, as seen in the Gorham case? | |
| If a whistleblower alleged similar conduct in our organisation tomorrow, what is the exact, board-mandated protocol, and how do we guarantee its independence from management influence? |