These are situations where a company subject to a commissioner violates a requirement set out in the act. In this case, the commissioner in question automatically triggers a administrative monetary penalty. That is how the Office of the Privacy Commissioner works.
It serves as a deterrent to the company.