Melissa was a nursing student when she was allegedly raped by a more senior colleague. She reported the nurse to the Australian Health Practitioner Regulation Agency (AHPRA) – a national body tasked with registering and disciplining health practitioners – but AHPRA took no action against the alleged perpetrator. AHPRA opened an investigation into Melissa and, after three years of delays and complications, the investigation concluded with the ombudsman finding that AHPRA had unlawfully disclosed Melissa’s confidential information, held inaccurate and out-of-date records, and failed to recognise her vulnerabilities. Melissa has since given up on her nursing career and is now seeking damages from the regulator.