No, that's not provided for in the act. Perhaps at the time there hadn't been enough leaks from large data bases for anyone to think it was a problem.
Yes, we're in favour of the principle. The problem is in knowing how to implement it.
On November 27th, 2006. See this statement in context.