Australian privacy experts believe the proposed legislation to increase penalties on data processors for negligent data breaches does not go far enough following the Optus and Medibank breaches, ABC News reports. University of New South Wales Faculty of Law and Justice data privacy expert Katharine Kemp “questioned” if the Office of the Australian Information Commissioner would be able to adequately investigate breach cases given its current level of staffing. She also recommended the Privacy Act be amended to clearly state when companies must delete customer data.