Well, I think it's important because if we want organizations to build privacy into design, if we want privacy and want them to invest money and time in building those things, we need to give them the incentive to do that. It's hard for a CEO and a board of directors to say, “We're going to spend millions of dollars,” when there's absolutely no risk and no financial consequence if they don't. It becomes something that feels like a “nice to do”, not something that you must do.
That's why this authority is important. Certainly, around the world, those risks exist for other jurisdictions. They don't exist here. That being said, I'm going to continue to use the tools that I have, including making reports public and including calling out organizations. I think those two powers would make the system faster, less expensive, more transparent and more effective.
