Privacy act reforms need further consultation ahead of change