Australian privacy regulator sues in data breach case

The Australian Information Commissioner has filed court proceedings against Australian Clinical Labs Limited over the company’s response to a data breach in 2022. Despite acquiring cyber security power in 2014, this is only the second time the regulator has gone to court, signaling willingness to ensure swift action on cyber-breaches. Although the maximum penalty for serious breaches was increased to A$50 million, because the incident occurred before the increase, the highest fine will be A$2.2 million.