The massive data breach at Optus prompts the government to consider whether tougher fines are needed for failing to protect sensitive information. In another headache for the telco, a law firm is considering a class-action over the breach of privacy.