I have two observations in response to that.
We are still talking about a very small number of companies that are the product of findings and aren't responding to the findings or aren't engaging in the process itself.
Second, what would the structure of the Office of the Privacy Commissioner look like after you give it powers for administrative monetary penalties? I don't think the commissioner could continue being an officer of Parliament. Does it end up being structured like the Competition Bureau or another administrative tribunal? How do you then have that ombudsperson and public information role, as well as this stricter organization with greater enforcement powers?