I think the key here is not the kinds of punitive measures that get put into place from an HR perspective, but rather the total system of compliance and checks and balances that gets created. At the end of the day, it's about Canadians. Resolving this matter is about the commissioner, but at the end of the day, it's about Canadians. It's so that Canadians can rest assured that their personal information is private and secure. It's ultimately our users who rely on trusting us with their data, because we know that our services are one click away from our competitors' services.
On November 4th, 2010. See this statement in context.