I'll come back to my remarks about policy. We think, having observed for over 25 years, if you look at the series of annual reports done by me and previous privacy commissioners, the things that are merely put in policy are often not taken seriously enough. Perhaps it didn't have the consequences, let's say, in 1987 that it does now, but we think this is the time to elevate them into legislation. There are also extensive exemptions in the Privacy Act. There are quite a few exemptions, so I think they would also apply to a necessity test.
On May 11th, 2009. See this statement in context.