The Privacy Commissioner wants stronger powers to fine agencies that fail to protect data. In an AI-heavy economy, the issue is no longer just data leaks — it is whether institutions treat personal information as a public trust.