Well, I would point to the findings that I made in regard to Cindy Blackstock. That was exactly the finding. We said, “Listen, Government of Canada, Ms. Blackstock's posts were personal. You collected it, yet you cannot justify that you collected it within your programs or activities, hence you collected it in violation of the Privacy Act.”
On October 6th, 2016. See this statement in context.