It is possible. My suggestion and my response would be that it would probably be useful to have that dialogue with the actors around the table. Most of the credible organizations that are our members would be happy to sit down with the Privacy Commissioner to have the conversation, and if it's non-compliance, look for the ways that it may need to be resolved. If that includes disclosure, if that includes some other powers, that I'm sure will get accomplished.
On November 20th, 2012. See this statement in context.