Australian Clinical Labs has been fined $5.8 million for a privacy breach, marking the first such penalty under the Privacy Act.
In February 2022, a cybercrime incident resulted in the personal medical information of 223,000 people being compromised after the lab's IT systems were breached.
The company was criticized for its slow response, failing to properly investigate the breach and delaying notification to the Office of the Australian Information Commissioner (OAIC).
The penalty of $5.8 million was ordered due to contraventions of privacy legislation.
Author's summary: Australian Clinical Labs fined $5.8 million.