I think that the key is in recommendations 8 and 12 on the list. This would enhance the status of what, at the moment, are only Treasury Board directives. Within state apparatus, much more importance is given to the provisions of an act than to the contents of a directive that, at times, is inconsistently applied. For example, we do not always have privacy impact assessments. We are recommending that you include them in the amendments to the bill so that they receive the attention they deserve.
On May 11th, 2009. See this statement in context.