Thank you.
It's a good question. I think certainly more could be done in terms of educating small businesses and getting the word out about what they have to do under PIPEDA. I think there may be a perception out there that it's much more onerous than it actually is. PIPEDA does not require every organization to have a separate privacy officer. If it's a sole proprietorship, a small business, the guy in charge of privacy is the guy running the business.