The short answer is yes, although we still see some difficulties. Our mandate at the OPC is in part to verify whether FINTRAC's security measures to protect the information they collect are appropriate and sound. Generally, we find they are sound.
We've had concerns over the years with the fact that some financial institutions over-report to FINTRAC, and that FINTRAC over-collects and over-retains information. This led to the amendment to the legislation that I referred to in my remarks, which was an improvement. The situation has improved in that regard, but we still see, including in our most recent review, instances of over-retention.