Will Australia need a new approach to data protection?