Yes, some of them call us, but we don't know about the ones that don't call us. It's clear to me as Privacy Commissioner that when this happens it's maybe not clear enough to all corporations exactly what they should be doing. I'm in favour of guidance, while waiting for the amendments to be passed, hopefully. I'd be happy to work on guidelines, so it's very clear when this happens they know what they should notify people about, and that's what Madame Lavallée was suggesting. What are the implications? What are the details? What's the template? Who should be notified? Who should people call? What should they do?
On February 22nd, 2007. See this statement in context.