There needs to be Australian Standards developed that everyone must comply with to annonymise personal data
and now a standard: "Privacy (Australian Government Agencies – Governance) APP Code 2017"
See https://www.oaic.gov.au/privacy/privacy-decisions/investigat...