The five-year review comes from precedent. Because we have the temerity to label these quick fixes--we know there are no quick fixes in a parliamentary process that involves so many actors and so on--we tried to hone in on things that were perhaps easy, understandable, and for which there was a precedent. So we looked at the other law we administer, the private sector law that applies to banks, airlines, organizations, and provinces that don't have their own private sector privacy legislation, and there is a five-year review there.
In some of the other provincial legislation, there are five-year reviews too. In B.C., Alberta, I'm not sure about Ontario, but certainly Quebec, the legislation comes up automatically for review. The scope of the review depends on the parliamentary committee that's reviewing it. The legislation just says that so the committee can do an in-depth or a perhaps shorter review depending on that, and then it would make recommendations. But I have not seen any legislation that says the recommendations would be binding on anyone. They follow the normal parliamentary process.