I guess the point there is that there are numerous examples where laws and legislation exist that permit the use of personal information. In our case, this is what we're dealing with here under PIPEDA, for the purposes of investigating breaches of the laws of Canada.
My next question is in regard to section 7. We start in the preamble, really at the opening of section 7, specifically talking about the fact that an organization under subsection 7(3)—we discussed this a couple of times in various testimony and questions we've had at committee—“may” disclose personal information without knowledge or consent, etc., and then it cites the various conditions.
The debate has been on the question of the word “may”, and the fact that nothing really obligates the organization. The question can be put but they really aren't obliged to provide under PIPEDA. It's their choice. In other words, the discretion is left with the organization.
Has that condition in PIPEDA been problematic for your investigations? Have you run up against organizations who recognize, for example, that you're a lawful authority, but they say the legislation only says they “may” disclose, so it's their choice if they wish to disclose or not?