Carrying on from that, in “Lessons from ArriveCAN: Access to Information and Justice during a Glitch”, you wrote that the government “failed to place the data collected from ArriveCAN into a Personal Information Bank, despite the requirements of the Privacy Act.”
Can you describe the potential consequences of this failure?