Blog
First Civil Penalty Imposed Under the Privacy Act
The Federal Court’s recent decision in Australian Information Commissioner v Australian Clinical Labs (No 2) [2025] FCA 1224 marks a turning point in privacy enforcement in Australia. It resulted in the first civil penalty under the Privacy Act 1988 (Cth)(the Privacy Act) being imposed on Australian Clinical Labs (ACL), which was ordered to pay an AUD5.8 million penalty following a 2022 data breach of Medlab Pathology Pty Ltd (Medlab) affecting 223,000 individuals….
By: White & Case LLP