Head of data security Will Farrell tells parliamentary committee Australian data accessible ‘on a very strict basis’