Thank you for that question.
In fact there may be no limits as to how long many companies keep information, and that is one of the challenges. We are presently investigating a company—we finished the investigation—that had no plan to delete the information. It had information from users, and these were quite young users, from five or six years ago.
When we said that under the terms of the law they had to delete this, they said they couldn't because it wasn't written into their programming. This is a very serious issue. We're presently discussing with them as to what alternatives can be taken.
It varies according to company, but this has been a consistent issue. That's why we highlighted to this committee that there are not appropriate plans to delete the information, and there is not a clear explanation as to whether deactivating your account means your information is deleted or just not accessible.