- Company
- Australian Clinical Labs
- Regulator or court
- Office of the Australian Information Commissioner (OAIC) / Federal Court of Australia
- Law
- Privacy Act 1988 (Cth)
- Status
- Final (agreed penalty ordered by the court)
What happened
In 2022, hackers stole the personal and health information of more than 223,000 people from Medlab Pathology, a business Australian Clinical Labs had bought only months earlier. The court found the company had not properly protected the data, was too slow to assess the breach and delayed telling the regulator. It agreed to a AUD 5.8 million penalty, the first civil penalty ever ordered under Australia's Privacy Act.
Sources
OAIC media releaseWhite & Case – First civil penalty imposed under the Privacy ActSummary in our own words. General information, not legal advice.