If Optus have said that, they're lying. Data retention laws do not require you to hold identity documents. At any rate, data retention requirements do not excus

If Optus have said that, they're lying. Data retention laws do not require you to hold identity documents. At any rate, data retention requirements do not excuse poor security.