The original privacy reforms proposed by the Attorney-General's Department would hit loyalty programs giving customers the right to opt out of marketing based on their data. That open opt-out of receiving targeted advertising hasn’t been accepted but there will be GDPR-style legislation.