Gap in privacy law leaves elections open to \'misuse\' of personal information: privacy commissioner