I've made a number of recommendations for legislative modernization. Good progress is being made on this consultation for the public sector. We're waiting for a new bill, I hope, for the private sector.
One thing missing is enforcement power. I don't have the power to issue orders or to impose fines. Canada falls far short of the rest of the world in this area. The vast majority of data protection authorities have this power. We don't necessarily need to use this power, but it must be available. To convince companies to invest in solutions, it helps if we can tell them that, if they don't, they're running a financial risk too.