Compliance
Compliance risk
When the Price of Milk is about Governance
The ACCC fined Lactalis $59,400 over misleading 'fresh' milk labelling, while the Federal Court's $11.3 million penalty against Mercer Super shows the same claims-outrun-evidence governance failure at a very different scale.
Artificial Intelligence (AI)
AI Vendor Assurances Alone Don’t Cut It: A Risk Management Wake-Up Call
APRA's April 2026 letter to industry and ASIC's Report 798 both warn that boards are leaning on AI vendor assurances instead of independently verifying them. Here is what Australian organisations should be checking before they trust the compliance pack.
Compliance risk
OAIC determination puts insider privacy risk back in the spotlight
The OAIC found an organisation breached APP 11.1 after an employee accessed customer personal information without authorisation. With the Medibank civil penalty case before the Federal Court, OAIC enforcement on internal access controls is active and escalating.
Compliance risk
Regulatory pressure often starts as an audit response before it becomes a broader operating expectation
The OAIC has published a formal response to the ANAO’s performance audit on administration of the Freedom of Information Act, signalling a review of FOI regulation, guidance, priorities and capabilities.