Fines to penalise privacy breaches under new APS code, Senate inquiry told