Thank you for the question, honourable member, on a very important topic—namely, the growing threats to data security throughout the world but including, too, the information held by Canadian companies or of Canadians elsewhere.
In this area, once again Canada has lagged significantly behind. We don't have specific data breach provisions. I believe we should. I believe we also have to couple them with some kind of incentive for companies to invest in the appropriate data security standards.
There is some legislation currently at second reading. I think the standard in the legislation is acceptable. It mirrors that which was already adopted by Alberta. But I think we have to have stronger enforcement powers, because under the present regime there's almost no sanction for a company that doesn't report either to my office or to consumers, if there's a real risk of significant harm.
So I would welcome this issue being re-examined.