Hopefully, sir, the changes will simplify the act and make it easier for small business to use. Some of the recommendations I've seen made over the past number of meetings here have indicated to me that if they were put in place, they would make it easier for the small business sector. I think that's an important point.
Secondly, there's the really critical issue of small business education. That, in my view, hasn't happened effectively yet. There's an urgency for the Privacy Commissioner—and the private sector as well, through different associations, organizations, and so on—to spend more effort trying to educate small business about the fundamentals of the law.
In most cases, if you're not collecting a lot of sensitive information, the law can be fairly simple to understand and apply. It looks complex on paper, but for small business it comes down to very simple rules. The problem is that there hasn't been enough education yet to explain those very simple rules to the small-business person. If that happens, you'll solve a lot of those problems.
But we need to make modifications to the statute itself to make it easier for business and for the public as well.