Thank you.
I'm still trying to get my head around privacy impact assessments, especially in light of what the Privacy Commissioner told us. Can you tell me how they currently work? And can you add whether you think the policy for that should be legislated?