Less onerous? I think there needs to be a simplification in terms of understanding what the obligations are, because the biggest hindrance right now for our members is this policy they have to come up with. They know they have to come up with a policy, a written policy, but they don't know what it entails or how it is supposed to work.
What I think needs to be done is that tools have to be created, or we have to find a way of simplifying it so it becomes clearer what should be part of that policy, and again, without their having to go to a consultant and having to spend thousands of dollars to have them do that for you.
We actually don't mind PIPEDA, to be frank with you, because it is a little more flexible than others. It is a principle approach. It is not prescriptive in nature. But keep it in very plain language.
Our suggestion is to keep it as it is. Let it flow through to Canadian citizens and businesses for a few more years. Allow them to understand what their obligations are. Use the time to educate not just businesses but citizens as well.
I think a big part of this is the fact that individuals want the convenience, as I mentioned before, but they also want their personal information protected. Sometimes you can't have both. You may have to give up one to get the other. I think that's where the challenges lie.