In that particular case, I was citing a service called Hangout, which I think Google offers, which is actually a video conferencing facility. The users themselves determine who's in the club, and they hang out together. When someone else enters, the machine tells them that someone else has entered. If they can't verify who the new entrant is, the service shuts down. I mention it only as an illustration of the ingenuity of people who are trying to provide the service and also provide the protection.
I guess you'll hear from witnesses from all of these companies. I don't think anybody can deny that they have a high sensitivity to their names being tossed about in the context of carelessness about people's privacy, so my concern is not that the best operators do not want to do what's right and do what they can for their consumers. That's why I say that it's quite difficult to invent user rules that are one-size-fits-all rules.
One of the reasons why I've appreciated PIPEDA is that it causes the officers of Canada to examine every situation sort of uniquely against a measure of reasonableness, as opposed to saying that they have a defined lockdown and everybody has to fit this picture even though the technology is rendering it moot.