I can address that from the point of view of Newfoundland and Labrador.
The privacy impact assessment requirement in our ATIP of 2015 was a new requirement. It is limited in that the privacy impact assessment is only required to be provided to the commissioner's office for review in the case of “a common or integrated program”. Unfortunately, there's been some disagreement between us and the government on the definition of “common or integrated program”, so we haven't seen too many for review.
However, there is still a requirement that public bodies complete a privacy impact assessment or a preliminary privacy impact assessment and provide it to the minister. We believe that has been a useful process in order for public bodies to get a good handle on the risks to privacy and to be able to address or mitigate those risks. Certainly, that's going to help with better privacy compliance for all those programs and initiatives that are subject to it.