Thank you very much to all three of you for your presentations.
I'm going to return to the privacy issues that were raised by the Privacy Commissioner in the written submission she sent in. She questions very seriously the new system, its implementation, etc. Specifically, Ms. Stoddart says that the personal information from individuals coming to Canada, whether it's for tourism, business, or to visit family, will be retained for 15 years.
On the other hand, we're hearing loud and clear that eTA approval could be for two, three, four, five years—indeterminate yet—and yet we're going to collect people's personal data and keep it for 15 years, which seems exorbitant to me.
She also goes on to say that the Government of Canada should be more transparent about how it uses this personal information collected from travellers, and that there should be careful scrutiny of the new system.
If you were listening to the testimony earlier from the department, we did hear that they're working on questions on a form, but it hasn't been determined yet. They haven't decided. Right now there are no plans to share it with anybody, but clearly they're only saying “at this time”, and that could change any time.
My question to you specifically, Robert, is what recommendations would you make, given your technical expertise, to protect privacy and ensure proper oversight and scrutiny of the new system?