I find it ironic that it appears that Telus went through more steps to protect its users' privacy than the Public Health Agency of Canada did, certainly in reference to the testimony that we received earlier.
When it comes to what the Public Health Agency of Canada did, were there frameworks or restrictions that would have ensured that this data was siloed or had a certain restricted level of use that wouldn't have gone beyond PHAC? Was there anything to ensure that queries and information that were sent to PHAC had to be managed carefully? When the data leaves Telus, what assurances were there that it wouldn't be shared with other agencies and departments of government, for example?