Just to take you on a bit on that, I find paragraphs (a) through (e) of clause 13 extremely specific and encompassing the act. I can't imagine other aspects. There's quite a regulatory power to make the proper regulations for reporting, notification, security, etc. I'm happy with (a) through (e).
I'd be happy to hear other members' comments.