The Australian government has found a major retail chain has breached Australians’ privacy in a case that could have major implications.