I'm sorry; my apologies.
The first two, the duty to protect and the data matching, were considered separately, and they were considered to be at least connected to the reporting by the federal Privacy Commissioner.
Within the discussion we had at the Canadian Bar Association, because we weren't looking at a complete overhaul of the Privacy Act, we were looking to consider the issues we thought were the most significant and thought that if there were a limited amount of attention that could be given to the Privacy Act, we should focus on those. Breach notification is related to other issues that the commissioner brought up, but it's also seen as something that needs to be considered, and considered consistently as between the private sector and the public sector.