If I may, I think GDPR is an excellent step forward. I think the control elements of personal data and the portability and the consent aspects, and I believe the shift to more algorithmic integrity, are great steps forward. I think that's really powerful.
I think all the folks around this committee should reflect on the fact that, I believe, under article 8 of the EU constitution they've drafted GDPR as a universal human right so I, as a Canadian, can demand all my data controlled from Canada under EU law or they're breaking European legislation. I think how you can play these various jurisdictional regimes and structures is a very powerful set of possibilities, and I think Europe is showing a model for the world. I think it's a journey.
I think Roger hit upon something extremely important, which is paying attention to the identity aspects. Traditionally, governments gave you credential identity called passports and driver's licences and I think that's been a gap in the Internet and its design—and Tim Berners-Lee would say that. Perhaps government should come back into that role of saying, we'll be looking after identity, and that's a form of vertical state investment that you could explore here and could address much of the problem at a very surgical level.