First of all, we need private sector privacy laws that are based on a human rights approach; that are based clearly on proportionality and necessity; that have clear rules around consent; that bring in oversight of artificial intelligence and regulation of artificial intelligence used by the private sector; and also bring in stringent regulations if not bans—it needs to be further studied—on the provision of the use by law enforcement and national security of third party and private contractors in order to carry out those activities that they cannot do themselves.
For example, as I mentioned earlier, the RCMP has disputed that they need to verify the lawfulness of services provided by third party contractors. If the leading federal law enforcement agency in the country says that they can use technology found to be unlawful and that it's not their problem, in so many words, we have a serious problem. That needs to be addressed in the private sector laws just as in the public sector laws, because current private sector laws allow for the sharing of information from the private sector to the public sector in law enforcement because of national security exceptions.
That needs to be a primary focus in reforming Canada's private sector privacy laws.