I'm struggling here with the third recommendation on the privacy assessment. She would like to see an obligation through legislation. Do you have any comments to that? Do you think that's the right way to go? Is it actually a requirement, or is there another way of making it happen without having legislation?
On May 15th, 2008. See this statement in context.