With regard to penalties, on April 18, just a couple of weeks ago, the government published in the Canada Gazette the long-overdue regulations for mandatory breach reporting and record keeping in Canada. I would just recall for our audience that on June 18, 2015, the previous Conservative government passed the Digital Privacy Act to amend PIPEDA.
Most of that act came into force then, but it's taken three years for the new regulations on mandatory privacy breach notification. We are told it will only come into effect in November, although it's been long expected by those who are aware they will come under the provisions of this reporting. Is that a justifiable delay in your mind?