Industry committee  The entire regime is overseen by the Privacy Commissioner, who has considerable capacity, such as the power to make orders and recommend AMPs and the ability to enter into consent agreements to modify the behaviour of those who potentially violate the privacy of Canadians. All of

Industry committee  As it relates to the government's position on Crown copyright, it's not a singular position. I think it's important to look at the Treasury Board guidance that relates to the publicity of information generated by the Crown, including the open-by-default standard and the importanc

Industry committee  I'm not sufficiently familiar, as this hearing today is on the privacy bill, with the full international examples of Crown copyright.

Industry committee  There are a number of provisions we have yet to get to in the CPPA that heighten the level of privacy protection for all personal information collected, used and disclosed by corporate entities in the Canadian context. They include requirements for express consent in a number of

Industry committee  No. We're comfortable with the idea of including a list, but an indicative and non‑exclusive list. The list needs to have both aspects so that there can be more than what's on the list and so that what's within the list is indicative, thereby giving context to the Office of the

Industry committee  It's about disclosures. It's about the nature of requiring express consent for every use, collection and disclosure of financial information, because the list as constructed says that such information is, by definition, sensitive, which means it cannot rely on implied consent. T

Industry committee  I would be uncomfortable with that characterization. I suggest that the government is suggesting the definition of sensitive information should have important flexibilities to both understand context and understand cases and use cases where that information may not be sensitive.

Industry committee  It isn't about regulations. It's a definition that includes sensitive information. It's about interpreting the definition.

Industry committee  In this case, it's hard to predict the possible interpretation given the construction of the sentence. It says that the list is non‑exclusive. However, all the items on the list are included in the definition. There isn't any room for interpretation, because it's clear. As a res

Industry committee  Mr. Perkins, I would note that Bill C-11 was contemplated by a previous Privacy Commissioner.

Industry committee  Yes, I am.

Industry committee  I'll turn to Mr. Chhabra to talk about the California consideration.

Industry committee  I'll turn to Mr. Chhabra, but I'll note that one of the fundamental aspects we've tried to draw out over the course of the discussion today is the importance of some sort of context-specific interpretation tool at the outset of the list. It's something that would read like, “due

Industry committee  As noted, the GDPR does not include financial data as sensitive information.

Industry committee  Mr. Chhabra may be able to speak to the specific formulation of the California law.