In another connection, a directive on social insurance numbers covers government organizations. This week, we had quite an extravagant example: Chrysler lost a data base containing 250,000 names of individuals and their social insurance numbers. We're also surprised that the private sector has people's social insurance numbers.
Does your directive provide that every organization must protect the use of that informaion and that it may only transmit it to private sector individuals in exceptional cases or specific cases prescribed by regulation?