Yes, I think the ultimate recommendation that this would come down to if we were in an alternative world would simply be to follow the government's own recommendations and the directives that it has in place, like the directive on automated decision-making, for example. That directive encourages source code in applications to be rendered public by default. In this case, that did not happen—distinct from other health apps designed to prevent the transmission of COVID-19.
Additionally, that directive also sets out that there should be meaningful explanations of how the artificial intelligence such an app might be using is being used to make decisions affecting Canadians. In this case, it's very difficult to get those explanations; we never got them. A large part of that was because the subcontracts from the primary contractors that the CBSA and PHAC used were essentially trade secrets and confidential information. Before the government operations and estimate committee on November 14, a representative from PSPC said very clearly that this information is information that is treated as proprietary, which was very concerning to me.