In 2011, the situation as described was in one riding. It was in the riding of Guelph. The young individual you identified was a member of the campaign in Guelph. He was a member of that team and thus did have access to the database for the region for which he was responsible, which was Guelph. The use of that data, particularly drawing non-supporter information with the purpose of deceiving those voters, was certainly a breach of privacy policy both then and now, as well as of Elections Canada law and significant laws.
We certainly were not pleased with that, and that is one of the reasons we now have a league-leading privacy policy. We have changed not only the policy. It's not just putting words to it. The ability to access data has changed significantly since that time, and I'm very confident in the processes we now have in place. The system at the time limited his access to only the region for which he had responsibility. That was one of the key limits at the time, but his access was approved by the campaign at that time, which was one of the checks against access.
It was a breach of our policy and a breach of Elections Canada law. We have evolved as an organization because of it, not just with respect to our policies but certainly with our procedures and the ability to access data. It has changed since 2011.