One thing we haven't talked about that we've talked about internally is the creation of a child SIN, creating a database where rather than registering when the compromise happens, potentially registering that child SIN at the point of RESP, and then both of us having information so that we can actually prevent the fraud. The use of SIN for children has always been on the lower end of risk when you consider all the other things, but that's an opportunity to get ahead of the problem.
On May 27th, 2014. See this statement in context.