We ask departments or agencies to look at every step in their proposed program or the proposed measures in the light of the Privacy Act as well as what we call the fair information principles. It has been said to us that strictly speaking these aren't part of the Privacy Act, and that's true, but these are the modern iterations of good data protection standards in the light of their impact on individuals' privacy in terms of keeping the personal information private.
We then look at the assessments that were done. We dialogue with the departments. We make suggestions. We point out where there could be changes. Sometimes the departments will make changes and sometimes they won't.
That's basically the process.