Financial penalties of $5,000 and $3,000 were imposed on The Cellar Door and its data intermediary, Global Interactive Works, for failing to make reasonable security arrangements to prevent unauthorised access of its customers’ personal data. The Cellar Door was also issued directions to conduct a security audit and to patch all identified vulnerabilities on its website.

Access the Grounds of Decision here.