I guess the point I'm trying to make is that we can't just directly adopt the ten commandments of the private sector privacy principles into the public sector sphere. Issues like consent and perhaps other ones--I haven't probed them--don't simply apply in the same way.
On May 8th, 2008. See this statement in context.