Potential fines are determined by breaches to the privacy legislation and are outlined as Penalty Units. At the time of writing a penalty unit is currently valued at $222. Each breach can be a piece of information such as a client’s email address, phone number etc.The current maximum civil penalty for an individual is 5 000 penalty units or $1,100,000, And for a company 50,000 penalty units or $11,100,000.