Let me give you an example regarding retention periods. When the CBSA first consulted us about some of these programs, it said it wanted to keep the information for 75 years. Those consultations were some time ago. We discussed this with the agency and it then decided to reduce the period to 30 years, in order to be able to identify individuals, and to de-identify the information after 15 years.
There is a dialogue with the departments. We see that they want to keep the data for a very long time. After discussing the matter, we are often able to reduce the retention period, but it is difficult to have a thorough discussion with the departments. Once again, there is no magic number when it comes to retention. The real question is what the departments need the information for and how long they have to keep it to meet their objectives, but it is difficult to have that discussion with them