As I mentioned, I focused on that, both at PIPEDA and here as well. From my perspective, the Privacy Commissioner plays a critically important role in ensuring adequate enforcement, from both private sector and public sector perspectives. On the private sector side, issuing nothing more than non-binding findings isn't good enough, and I think order-making power would be more valuable.
In the context of the Privacy Act, I must admit that the power of moral suasion that the commissioner might well have might well be more effective with a government department than it would be with a private sector entity. I think both from a consistency perspective and for those instances in which you effectively have a standoff between a department on the one hand and a privacy commissioner on the other, order-making power might well prove valuable.