Privacy commissioner uses new power to tell Reserve Bank to