The Corporate regulator ASIC, says it is considering criminal prosecutions against financial institutions over “serious” and “acceptable” delays in finding, reporting and correcting law breaches, that cost 5 million consumers almost $500 million between 2014 and 2017.  In some cases it  took more than five years, on average, from the actual incident to compensate customers. 

https://amp-smh-com-au.cdn.ampproject.org/c/s/amp.smh.com.au/business/banking-and-finance/unacceptable-asic-slams-banks-delays-in-finding-fixing-breaches-20180925-p505vf.html