Thanks very much.
I wanted to start by asking about enforcement powers. One model is order making. Another model is fining powers, administrative monetary penalties, and/or a combination of the two.
We heard testimony the other day that in the EU there are significant fining powers. I think it's up to 4% of company revenue.
What are your comments on whether we should empower the Office of the Privacy Commissioner with such administrative monetary penalty powers? Would that be a good idea?