My second question is for the two witnesses.
You did not discuss it in your presentations, but certain authorities, for example, in Canadian airports, have collected metadata on Canadians to obtain a very clear picture of an individual's virtual itinerary.
Do you think the Privacy Act would be the right place to define metadata? Should we focus on that angle or should we instead find the definition in the National Defence Act or in other legislation?