Fortunately we had a code of ethics prior to PIPEDA that reflected those principles, which our members followed, so we were not terrible fussed by the legislation; we didn't have to change very much. But the fundamental of it, of course, is that you need consent to acquire personal information, you need consent to use it, you need consent to disclose it, and it must be limited to the purposes you've identified. That's the basic framework of PIPEDA. It provides considerable restrictions in the marketplace on the use of personal information.
On December 4th, 2006. See this statement in context.