It's not set out as such. What I do know is that Treasury Board is currently, in fact, revisiting all of the ATIP policies, including the PIA policy, and they are developing a new one that will come into effect on April 1, 2009. Whether that will reflect some of the comments of the Privacy Commissioner, I don't know.
On June 5th, 2008. See this statement in context.