Australia / Regulation

Status-aware timeline

OAIC regulatory actions

Each matter event retains the source-backed distinction between a preliminary inquiry, investigation, enforceable undertaking, proceeding, judgment, and penalty order.

An allegation is not a finding. A closed preliminary inquiry without an adverse finding is not an endorsement or compliance assurance.

7 source-backed events.

  1. Outcome No Adverse Finding

    Qantas Airways Limited

    1 June 2026 · The Commissioner closed preliminary inquiries without commencing a CII or taking other regulatory action at that time.

    The OAIC did not consider the evidence supported the likelihood of a breach. The report says this is not an endorsement or broader compliance assurance.

    No adverse finding is implied by this status.

  2. Civil Penalty Order

    Australian Clinical Labs Limited

    8 Oct 2025 · The Federal Court ordered Australian Clinical Labs to pay $5.8 million in civil penalties.

    The OAIC source reports Federal Court orders and admitted contraventions, distinct from an allegation or investigation.

    This record represents a source-backed court or determination outcome.

  3. Civil Proceeding Allegation

    Singtel Optus Pty Limited and Optus Systems Pty Limited

    8 Aug 2025 · The Commissioner filed civil penalty proceedings and alleges serious interference with privacy.

    The filed proceeding contains allegations. Whether a civil penalty order is made is a matter for the court.

    The Commissioner alleges; no finding is represented.

  4. Enforceable Undertaking

    Oxfam Australia

    20 Dec 2024 · The Privacy Commissioner accepted an enforceable undertaking on 20 December 2024.

    The OAIC expressly states that acceptance was not a finding that Oxfam breached the Privacy Act or Australian Privacy Principles.

    No adverse finding is implied by this status.

  5. Civil Proceeding Allegation

    Medibank Private Limited

    5 June 2024 · The Commissioner filed civil penalty proceedings and alleges serious interference with privacy.

    The filed proceeding contains allegations. Whether liability or a civil penalty is established is a matter for the court.

    The Commissioner alleges; no finding is represented.

  6. Investigation Commenced

    Medibank Private Limited

    1 Dec 2022 · The OAIC commenced an investigation into Medibank's personal information handling practices.

    The OAIC source reports that an investigation commenced. It was not a determination or finding.

    No adverse finding is implied by this status.

  7. Investigation Commenced

    Oxfam Australia

    10 Sept 2021 · The source timeline says the Commissioner commenced an investigation on 10 September 2021.

    The later OAIC release records when the investigation commenced.

    No adverse finding is implied by this status.