Okay.
Right now the Privacy Act sets out a number of rights and obligations of government and rights of individuals, but it only allows the Privacy Commissioner and the individuals to go to court to enforce their rights in respect of the access to information rights. The requirement is that government only collect information if it relates directly to an operating program and only disclose for consistent purposes; there's no way of enforcing that right, so when the government violates the act, there's no way of holding it accountable, other than reporting publicly on it.
One of the Privacy Commissioner's recommendations, recommendation number 2, is to broaden the grounds for which an application for court review can be made to the full array of privacy rights and protections. That's the same recommendation we are making, except that we are also suggesting that the Privacy Commissioner could be more effective if she had order-making powers herself.