There was an article in The Australian about this yesterday coincidentally. Consumers may be allowed to seek compensation ie sue companies for privacy breaches.