Comment on Australian Privacy Commissioner calls for mandatory reporting of major data security breaches