So the surprise is to learn that people don't necessarily have the reflex to consult the commissioner in this kind of situation.
Do departments and agencies have a good understanding of the Privacy Act or their privacy obligations?
On February 1st, 2024. See this statement in context.