I am interested to hear what atlassian have to say about it, they have been quite pro-australian. But.. what effort do you think the AU police are going to put in to get the data out of your JIRA tickets?

Because if you want to punish Australia for it's poor laws that seems a weak lever to pull.

And if your concern is MITM between servers, virtual machines or clients- well USA has had sufficient inference, probably by government actors, that some big players instituted SSL inside the data centers- I presume after finding taps.

This is legislation to say they can do that sort of thing- it just seems to happen elsewhere but under some seal of secrecy. At least they acknowledge it.