The current act has been criticized for not having any teeth. Presently, upon investigating, the commissioner may publicly expose companies that have breached the act. That's basically the deterrent we have.
Does the act allow for the same action by the commissioner for the police? If it doesn't, should it? In other words, if the police, like any corporation, were to breach the act, the letter or intent of the law, does the Privacy Commissioner have the power to publicly chastise the police?