What the new Australian privacy law means for consumer data?