Ms. Gratton, you talked about PIPEDA. In 2007, there was a fact sheet on businesses and identity theft that was published. The Office of the Privacy Commissioner noted, “Minimizing the identity theft risk means making the fundamental privacy principles enshrined”—under PIPEDA—“part of an organization's culture.”
Do you think that organizations affected by identity theft have followed that recommendation?