The deputy commissioner did not issue a compliance notice because of the remedial steps taken by the UoM during the investigation, including developing a new surveillance policy and amending its terms of use and associated policies.

No consequences for their wrongdoing. They can just retroactively state they track you now.