We don't have enough resources. Our resources have not been increased in step with our increased responsibilities to manage privacy breaches. They have not been increased, either, to respond to the rapid development of artificial intelligence, the explosion of data and the heightened challenges that are arising in this area nationally and internationally and that require greater collaboration. I am aware of the very difficult financial context, but I continue to request an increase in my organization's funding for these reasons, which certainly distinguish my mandate from that of other organizations.
That said, we will do as much as we can using the financial resources we have, within the limits of the legislation and the structure in place. That's why I reorganized the office of the commissioner. I have reduced the use of some resources and optimized others. I use persuasion and flexibility. I will continue to use to the best of my ability all the tools at my disposal, which also include international collaboration and partnerships.
I'll give you a very concrete example of the privacy breaches at the big genetic data company 23andMe. I conducted a joint investigation with my U.K. counterpart. My office had more power than his during the investigation, but his office had more power than mine to impose penalties. So we did the investigation jointly and came to the same decision. My counterpart was able to impose a fine, whereas I did not have that power. Doing the investigation jointly amplified the outcome.
