Source: Privacy Commissioner
This is a David vs Goliath case, where the onus and due diligence was on the organisation with a team of professional communication experts. Ignorance of the situation is not an argument to decision making which ultimately causes harm.
Just because information is publicly available, does not make it automatically ok to reuse or republish for your own purposes. There can be significant impacts on all individuals, and particularly those who are more vulnerable such as minors. Online tools make it easy to share information without thinking, but agencies still have obligations to take care with personal information collected.
A good way to avoid negative outcomes is to stop and think before sharing the information. Would the individual be surprised to find you are using or sharing their information in this way? Are their any factors which make them vulnerable, or you suspect they would not want the information shared? If the answer is ‘maybe’ or ‘yes’, that might be a good time to reassess what you’re using the information for.
The agency apologised for the harm caused, and a financial settlement agreement was reached between the parties.