It's in the bill.
The way these are worded—I'm looking at them now. If I compare these to their international precedents in countries like Australia and Singapore, they did pass similar exceptions. They have proven to be sometimes beneficial to allow for some innovative technologies to be developed to allow some uses of computer programs and some kind of incidental copying in order to do things like encryption research and network security and those kinds of things. Their exceptions are much narrower than the way they are currently defined in Bill C-11. Currently in Bill C-11 they are defined with almost no qualification, whereas in jurisdictions like Australia and Singapore, the exceptions are limited to, as an example, making sure the person who is using this, who is cracking software and encryption for the purpose of doing this kind of research, is in fact trained and qualified and has the appropriate skill or education to make these kinds of things...that we are not just legalizing computer hacking, as it would be.
Another condition that seems quite reasonable to me is, if you are going to hack into someone's security network or you are going to hack into someone's computer program in order to do these kinds of research and for other beneficial purposes, you would at least make a good-faith attempt to notify the person and try to obtain the person's permission prior to hacking into their network. Those are internationally recognized preconditions to some of those software-specific provisions.
Again, I'm happy to provide you with a more detailed list of them. That's what I would recommend.