The federal government has flagged reforms to Australia’s privacy laws in the wake of a cyberattack that left the data of up to 10 million current and former Optus customers exposed, including heftier penalties for companies that fail to safeguard users’ personal data.