Absolutely.
The theory in the private sector, at least where there's competition, is that this would create a market for Canadian companies to restrict their data sharing to sharing within Canada, and to advertise that and attract customers that way. Of course, that argument does not apply in the public sector, which is why we need stricter regulation in this area, and possibly blocking--statutes that block the Canadian government institutions from transferring data to foreign entities, at least when it's not adequately protected.
British Columbia has been through this entire exercise. There's no need to repeat it. You can look at the amendments they made to their public sector privacy laws in order to deal with this and find out how those are working.
As with so many issues under the Privacy Act, Treasury Board has adopted a policy. They've educated all the federal government institutions about this issue, they have done a review of all the contracts, they have identified risk areas, and all this kind of thing. Our view is that this is an area in which that policy is not good enough, an area in which we can and should look at legislating further protections for Canadians.