When it comes to PIPEDA, I think the biggest challenge they're facing is understanding what their obligations are. Most small businesses in Canada are not going to be handling huge amounts of personal information. Many of them don't necessarily always deal directly with the public, and so I think it gets a little complicated to understand what it is they need to do to comply.
The biggest question we always get is that they want to comply but they don't understand what they need to do. The irony is that most of them are probably doing it already. It just hasn't been formalized on a piece of paper, and that's the big challenge they face. So having some sort of tool that can help them understand how to put it down on that piece of paper to say, this is what you need to do to make sure you're protecting the public's information and your employee information.... Many of them are also calling on that, even though under PIPEDA most of them are not required to do so. I would say that's probably the biggest challenge they face.