I start from the principle that information collected by political parties will, for the most part, be quite sensitive personal information because it goes to political opinion. We don't explicitly refer in Canadian law to what is referred to explicitly in Europe as the distinction between general personal information and sensitive personal information. Nevertheless, political opinion is obviously very sensitive personal information.
I think it's wrong that the management of that kind of sensitive information is unregulated. Do I have examples of wrongs committed? I don't know. We can't investigate. We don't have the jurisdiction to investigate. I'm starting from the premise of the sensitivity of the information that is unregulated. Why is it unregulated? Because parties fall in between the Privacy Act and PIPEDA. They are not government institutions, but they are not commercial institutions. If they were either of the two, we wouldn't be talking about this. They fall in between.