The Privacy Commissioner, in her decision in finding 14--and this is contained in your brief as well--certainly contends “that the meaning of 'personal information', though broad, is not so broad as to encompass all information associated with an individual”. She goes on to say, “An individual prescription, though potentially revealing about a patient, is not any meaningful sense about the prescribing physician as an individual”. It's talking about the professional process. There seems to be an agreement there that this type of information should in fact be available for the reasons you and your industry espouse.
I would say, again, where do we need to make this more ironclad?