The second concern from the government's perspective is that the requirement to notify after six months would actually create a legal obligation on the government to actually collect more personal information than it would normally.
The government does not automatically receive all the identifiers with respect to an individual. You might know their age and the type of injury they've suffered, but you don't necessarily know where they live or who they are and what their names are. Notification by the government would require an additional collection of personal information, which I think then defeats the Privacy Act.
We would simply say that the privacy commissioner appeared before the Senate committee and expressed the view that from a privacy aspect, there were no concerns.