I'm going to confess my bias as a barrister and solicitor in that I think one of the most important fundamental freedoms we have is the strength of the solicitor-client privilege in this country on all issues. Quite frankly, I'm surprised that it's in the Privacy Act, and I have no difficulty personally with requiring a court to make a decision as to whether or not the privilege has been properly claimed. I think that's the proper place for that very important fundamental freedom of individual people to be determined, and not--with all due respect and not to you personally--through a commissioner not reportable to the judiciary.
This is my third and last point, and I'll read this directly from our researcher's question because we want to try to get an answer:
With respect to the issue of breach notification, we have received a white paper put out by the Canadian Internet Public Policy Interest Clinic in January 2007. CIPPIC advocates a law requiring organizations to notify individuals when certain breach criteria are met.
Have you had a chance to review that paper? What are your comments about it?