Australia’s Privacy Commissioner has shown he’ll call out businesses that fail to protect personal data, and now he has the legislative teeth to punish them. But will it happen?