The example you raise is that of a rather serious breach. Maybe we should consider publicizing the name when we have an unusual situation, a very obvious breach.
But what do we do about companies who, without disclosing important information nevertheless frequently fail to meet their obligations? If a company regularly breaches the Act, not about important things but minor matters, this would seem to me just as problematic as one major event. Do you agree?