Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Office of the Privacy Commissioner (OPC) – 0 % · 1 case
What for?
by topicWho?
by sectorAll sectors
When?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2024 | 1 | – |
| 2025 | 0 | – |
| 2026 | 0 | – |
1 case
24 Sep 2024 a New Zealand aged care providerNew Zealand aged care provider: publicly named for notifying a privacy breach two years late Other
At one of the provider's care facilities, part of a resident's paper file was lost, which came to light during a special audit in August 2021. Although staff considered the incident notifiable and the health board and later the Health and Disability Commissioner (health complaints authority) urged notification, the company only informed the Office of the Privacy Commissioner (OPC, New Zealand's data protection authority) in October 2023. On 24 September 2024 the Privacy Commissioner found a breach of the notification duty and poor document management and named the company publicly.
Every loss of data must be assessed immediately for notifiability – even a single lost health file can be a notifiable breach.
Recognising and notifying privacy breaches on time
Missing or inadequate training played a role in the decision.
- Authority / court
- Office of the Privacy Commissioner (OPC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Privacy Act 2020, s 114
- Action
- Other
- Status of proceedings
- final
- Sector
- Healthcare
- Mitigating circumstances
- Constructive engagement; introduction of an electronic document management system with access controls, staff training, a privacy breach management plan and a revised management structure.
- Published
- 24 Sep 2024
- Office of the Privacy Commissioner, Decision notes (Übersicht) (Entscheidung 2024) Enforcement database of an authority
Checked against the official source on 7 Oct 2026 · Company name anonymised since 24 Sep 2026 · Direct link