Industry committee  That's excellent. Your organization in the past has advocated for an amendment to PIPEDA to allow prescribing information to be shared for certain research-related purposes. Does the proposed exception to consent for work product information meet this objective?

Industry committee  So forgive my ignorance about your industry or your side of it, but what research are you doing with all this data?

Industry committee  Thank you, Chair. Thank you, witnesses, for being here. It's obviously an interesting topic and it has raised lots of discussion, input, etc. Mr. Levin, sir, how do you think that the mandatory data breach reporting would help reduce the risk of identity theft?

Industry committee  Just to follow on from that, do you think we should be legislating manufacturers of computer systems and software to prevent breaches of data?

Industry committee  Thank you. Bill S-4 includes new provisions that will assist organizations in preventing and combatting fraud. How will these provisions further assist and facilitate these activities? This is directed to the banking association.

Industry committee  Thank you, Chair. Thank you, witnesses, for being here. My first question is to Ms. Sali. Do you think that Bill S-4's new provisions on valid consent will strengthen the protection of children's online personal information, in fact, anybody's information? A lot of the time the consent that you're actually looking for is so complex that I don't know anybody who has actually read through it all.

Industry committee  Thank you. Would anybody else like to comment on that?

Industry committee  I think the other thing is, there are many things that are hidden in there such as marketing use of your data, etc., that you're signing off on, which is not necessarily something you want to do. My next question is to the Retail Council of Canada. You have stated that support to risk-based approach to data breach notification on individuals....

Industry committee  Are there any comments from any of the other groups?

Industry committee  All right. On the consent issue, I mean, nobody actually ever reads any of that consent stuff before they use some of these products. What suggestions do you have to improve that process?

Industry committee  Okay. How much time do I have left?

Industry committee  Mr. Gogolek, do you have any comment?

Industry committee  Thank you. Following on from that, clearly the Internet doesn't have any borders as such. That adds a dimension of complexity towards privacy, breach of privacy, and things like that. In fact when we actually talk about all this reporting, in my view it doesn't necessarily capture the theft of data, which the organization may not actually even know, having seen lots of different ways of hacking computers, etc.

Industry committee  Okay. Does anybody else want to comment on that?

Industry committee  Thank you, Mr. Chair, and thank you everybody who is here. I'd like to direct my initial question to all of you, but we'll start with Ms. Lawson. Ms. Lawson, in your introduction, you talked about defining when a breach should be reported by saying that it should be a real risk of significant financial loss.