In 2019–20 the ASC notified the Office of the Australian Information Commissioner (OAIC) of a suspected privacy breach under the Notifiable Data Breaches Scheme. The ASC supplied a breach report to the OAIC at the culmination of its investigation. On 17 February 2020, the OAIC closed the incident.