‘If you break the law or you’re a threat to security, you lose your right to privacy,’ ASIO’s Mike Burgess said.