The names, addresses, contact details and expired credit card numbers of thousands of AA customers have been taken by hackers.
The details were taken from the AA traveller website in August, impacting customers between 2003 and 2018.
Acting privacy commissioner Liz MacPherson spoke to Māni Dunlop.