I see. I'm running out of time here, but I just wanted to clarify that. I know that there has been a real concern, certainly under section 18, about the broad nature of so-called business activities and whether or not it's better to establish a fiduciary responsibility that imposes the duties of loyalty and of care when personal information is collected, particularly when we're dealing with information about people's racial and ethnic origins, philosophical beliefs, religious beliefs or their biometrics or genetics.
Do you think we need to have a much clearer definition of the obligation to protect this information?