I mostly wanted to say that I think corners should not be cut.
Notwithstanding the discourse of the industry—which has a very clear problem in terms of privacy protection—currently, our main concern in Canada is the lack of a national standards framework within which businesses would operate. We suggest establishing a set of very clear standards—with very clear parameters—which companies would have to meet.
In addition, companies would be asked to adopt effective measures. Those measures could be evaluated occasionally by Canadian public authorities, for instance, to determine whether those standards are being met. I don't see private stakeholders telling private companies how to organize the way they want to interact with their clients. A broad framework is required.