A department or agency, whose name escapes me, told the committee that its most recent privacy impact assessment dated back to around 2006. That was before the invention of Twitter. This seems negligent to me. We can't turn a blind eye to the fact that a technological revolution—such as the one currently under way—affects privacy.
I agree that there are still some grey areas, which you'll shed light on. In a number of cases, people said that the assessments seemed incidental, so not essential. I know that they aren't mandatory. However, according to Ms. Anand, they're required. If they aren't mandatory, there won't be any compliance.