In your fifth recommendation for some possible immediate changes, you suggest that the Office of the Privacy Commissioner
...release information on its own initiative concerning the personal information management practices of a government institution where this serves the public interest.
Help us to understand what you mean by “public interest”. What criteria would you use to determine whether some sort of public announcement would be needed?