A financial penalty of $6,000 was imposed on Aviva for failing to make reasonable security arrangements to prevent the unauthorised disclosure of the personal data of its policyholder and his dependent.

Access the Grounds of Decision here.