Right. Of course, if your office doesn't know that the law is being broken, then I guess the government's contention is that it hasn't broken the law.
Do you think that a vague standard like “any threat”, which is the term used in the legislation, undermines safeguards in the Privacy Act, such as the requirement that collection or use must be necessary, proportionate and authorized by law?