The Office of the Australian Information Commissioner has brought civil penalty proceedings accusing pathology services provider Australian Clinical Labs of failing to take steps to prevent a February 2022 data breach that affected millions of patients.