Thanks, David.
I'll just wrap up, Mr. Chair, with a quick overview of our conclusions today.
The first one is that there be no changes made to the act at this time and that the commissioner be given the additional time—she talked about five years—she has requested to work with the current act.
Ensure a proper balance is maintained so that the interests of both consumers and businesses are considered.
Maintain the current ombudsman model to effectively protect privacy. With this model in place, mandatory privacy breach notification is not required.
Make no changes to the commissioner's powers with regard to naming power.
Do not place restrictions on transborder data flow that could impede trade and competitiveness.
And we recommend that the Privacy Commissioner's office and other business groups continue to play a strong leadership role in educating and informing firms—and particularly here, small and medium-sized enterprises—and individuals of their rights and obligations under the act.
Thank you, Mr. Chair, for the opportunity to be here today.