The Federal government could be on the hook for millions in compensation to almost 1,300 asylum seekers following a ruling by the Privacy Commissioner that the government interfered with refugee privacy by publicly disclosing personal information, the first finding in a representative action that individuals affected by a data breach are entitled to compensation for non-economic loss.