Progress

Current status
in force
08 Oct 2025 in force
17 Sep 2025 under investigation
03 Nov 2023 under deliberation

Scope

Implementers
Australia
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
judiciary
executive
Government Body
court
data protection authority
Implementation Level
national

Timeline of events

08 Oct 2025
in force

Federal Court of Australia issued ruling against Australian Clinical Labs Limited with fine of AUD 5.8 million over data breach

On 8 October 2025, the Federal Court of Australia ordered Australian Clinical Labs Limited (ACL), to pay a civil penalty of AUD 5.8 million for contraventions of the Privacy Act 1988. The Court found that ACL failed to take reasonable steps to prote…

Source
Event type public lawsuit
Action type ruling
Government branch judiciary
Government body court
17 Sep 2025
under investigation

Australian Information Commissioner and Australian Clinical Labs Limited filed statements of agreed facts in lawsuit concerning data breach

On 17 September 2025, the Australian Information Commissioner and Australian Clinical Labs Limited (ACL) lodged a statement of agreed facts in the Federal Court of Australia, confirming agreement on the company’s contraventions of the Privacy Act 19…

Source
Event type public lawsuit
Action type interim ruling
Government branch judiciary
Government body court
03 Nov 2023
under deliberation

Australian Information Commissioner filed lawsuit against Australian Clinical Labs Limited over alleged privacy violations

On 3 November 2023, the Office of the Australian Information Commissioner (OAIC) commenced civil penalty proceedings in the Federal Court against Australian Clinical Labs Limited (ACL). The proceedings follow a Commissioner-initiated investigation i…

Source
Event type public lawsuit
Action type announcement
Government branch executive
Government body data protection authority