Breaches can result in public ASA rulings, reputational damage, and in serious cases, referral to professional regulators.