Australia's privacy commissioner has threatened a complainant with legal action to prevent the full disclosure of findings of a long-running investigation into American Express's information security that found widespread technology failures.