That's the recommendation that concerns the privacy assessment. The privacy assessment models developed by the Treasury Board Secretariat obviously provide for the destruction of personal information. It should be included in the act and the privacy assessment should be made mandatory. It may not solve the problem, because there will always be accidents and negligence, but mechanisms will have been put in place to prevent them.
I think that's one way of responding to your concern, which is indeed a constant concern.