Thank you.
This amendment is responding to concerns by Michael Geist and what he called the “glaring omission” in PIPEDA, which is that organizations do not need to report on how many warrantless disclosures to the government they've made and they never need to notify the individual whose information has been shared. The number of requests made to telecoms is absolutely staggering—over a million requests, and 750,000 disclosures of personal information—and the majority of those are without court oversight or warrants.
First, the law should require organizations to publicly report on the number of disclosures that they have disclosed, in aggregate, every 90 days. Second, organizations should be required to notify affected individuals of that disclosure within some kind of reasonable time period.
Thank you, Mr. Chair.