At this point you've identified a potential threat to Canadian privacy, you have expressed that to government, and you are waiting for a response back from them. You think it will be incumbent upon you to inform Canadians of perceived risks, depending on how—
On May 4th, 2017. See this statement in context.