Tonight it looks like they're changing the legislation to prohibit access without a warrant, and giving people the option to permanently delete.
It doesn't solve the hacking issue, but will appease the concerns about the ATO etc getting your data - until a subsequent govt quietly changes the law back again.