Australia's new mandatory data breach disclosure law is attracting a lot of attention, and a lot of criticism. But it will also have some interesting – and perhaps unintended – consequences.

Most commentary has been about the fact that it will give Australia some of the strictest disclosure rules in the world. That is a good thing to some people and a bad thing to others.