The Office of the Australian Information Commissioner announced civil penalty proceedings against Australian Clinical Labs Limited over Privacy Act violation allegations stemming from a 2022 data breach. An OAIC investigation revealed alleged data security lapses and improper data breach notification practices. Commissioner Angelene Falk claimed sale of the breached information on the dark web left individuals "exposed to potential emotional distress and the material risk of identity theft, extortion and financial crime."