In a rare example of the Commissioner making a determination under the Privacy Act, Aerocare Pty Limited has been found liable to compensate an airline passenger for the manner in which they collected and disclosed sensitive health information about the passenger in an airport departure lounge.