The Office of the Australian Information Commissioner (OAIC) has ruled that healthcare providers Monash IVF and Medmate breached privacy laws by using third-party tracking pixels to collect sensitive health data for ad retargeting. The regulator clarified that behavioral signals like page views, cart activity, and form submissions constitute sensitive information if used to identify users, setting a significant regulatory precedent for the broader ad-tech ecosystem.