Perhaps you could also speak to section 72, which requires privacy impact assessments.
Also, Ms. Tully, Mr. Molloy, and Mr. Murray, perhaps you could speak to whether we ought to incorporate such a requirement and whether, in your view, there's a difference between incorporating it in legislation versus in the rules that we have with the Treasury Board.