We're investigating. You're asking, doesn't the current law address that problem? The current law talks about consent. It doesn't define consent really, but there is room within the current law to give guidance to organizations on what we expect, as a regulator, consent to mean: meaningfulness, information to individuals as to what's at stake, and so on and so forth. To that extent, yes, the current law gives us quite a bit of latitude in defining our expectations.
That being said, it would be important for you to understand that we had communications with organizations regarding draft guidance on consent following our report last year. One of the things we were told by some companies was that the OPC has no role to interpret the current law more than, or in addition to, what the law allows.
In other words, the law is written generally, and some committees are telling us that we have no role in trying to define that more practically for consumers. I find that of concern.