At the moment, the act is set up to wait for people to complain. There have been quite a number of complaints. The Privacy Commissioner probably has figures in the annual report. It's not perfect in the sense that if no one complains you don't find out it's true.
