Made a formal complaint to the OAIC - which has a purpose of "making sure that Australian Government agencies and organisations with an annual turnover of more than $3 million, and some other organisations, follow the Privacy Act 1988 and other laws when handling personal information" - about the #Qantas data leak.
If they get away with a slap on the wrist, and not a big fine (and ideally a payment to each customer), I'll be annoyed. The OAIC's purpose is to ensure adherence to the law. Without a massive bloody fine, they'll be as useless as ACMA (and that's pretty useless).