Australian Clinical Labs has been fined $5.8 million for a privacy breach, a first under the Privacy Act.
In February 2022, a cybercrime incident exposed the personal medical information of 223,000 people after the lab's IT systems were breached.
The lab failed to properly investigate the breach and delayed informing the Office of the Australian Information Commissioner (OAIC).
The penalty of $5.8 million was ordered for contraventions of privacy legislation.
Author's summary: Australian Clinical Labs fined $5.8 million for privacy breach.