I will go back to the commissioner for one last question, and then I will hand it over to my colleague.
Organizations and political parties usually have a privacy officer. It just came to me at the end of our exchange that there are certified professionals in human resources who work in a lot of these places.
Doesn't this partly also make the case for ensuring our people are certified, and that they have professional standards to meet in order to ensure that privacy rules are in place? I know you said that in this particular piece of legislation it doesn't outline exactly the contents of the privacy rule for the workplace or for the organization. If you have certified people there managing it, their professional college will ensure that it meets certain requirements set out. I was a registrar before. Privacy is part of human resources' standards of practice, the kind of professional code they have. In Quebec there's a registered association that oversees this, just like for accountants who oversee audited financial statements.
Doesn't this make the case for ensuring there are certified people in those organizations, including political parties?