In the current legislation, PIPEDA has requirements for organizations to set retention schedules for all of their personal information. The commissioner alluded to that.
In terms of requiring companies to think about privacy as they're implementing new technologies, this is an ongoing challenge. It's something privacy commissioners around the world, and in Canada as well.... The Ontario Information and Privacy Commissioner has been very vocal on her views on privacy by design.
Companies are thinking about how they need to be in line with privacy protection. But clearly, awareness is a challenge. The private sector, as well as individuals, have a role to play in protecting their privacy online.