I'd be happy to send more information. I'm working with colleagues who are developing an international standard and a facility to do just what I've been describing. It turns it around, puts us in the driver's seat and compels organizations to comply with legislation.
That's important, considering there are still a lot of them in Canada that have yet to comply fully or at all with PIPEDA, 20 years later.