Yes. Having it in law is necessary. It has to be clear, not open to interpretation by an organization that wants to use the law to its advantage and not for the sake of clarity. But I caution saying, well, we have new legislation, Bill C-27, the artificial intelligence data act, and that will protect it. It doesn't, because any organization that is deputized, if you will, by CSE or CSIS can do what the government can't.
On August 9th, 2022. See this statement in context.