It's in the Privacy Act now and it's insufficient as far as we're concerned, and we're concerned specifically about giving protection to information about requesters who are not individuals. There is an issue with putting that in the Privacy Act, which is designed to protect information about individuals, but I think too you have to realize that the pressure to disclose requester identities comes mainly in the access to information world and not so much the privacy world.
When people ask for their own information under the Privacy Act, the communications function of the department is not triggered, the minister's office is not interested, and there aren't Qs and As. They're asking for their own income tax file or their own disciplinary file or information about themselves. It's when you get into access to information requests about broad policy issues, actions, expense accounts, and so forth that a department becomes interested in knowing who's asking for that, what they might do with it, and how can the department get ready to react to it.