Well, obviously, our ability to withhold consent would have to be reviewable by the Privacy Commissioner. We'd make the point that it can't be absolute. We understand there has to be a mechanism of oversight. But rather than it being triggered by a request and then a subsequent objection, we would just like to see it mandatory that they not disclose the fact that we requested the information, unless the Privacy Commissioner so orders, for example.
