Thank you.
On the private right of action, I'm hoping you can give us some advice. Given your testimony and the experience that the Competition Bureau has around penalties, what I would love to hear about...because we heard from other witnesses that at present what they're worried about, I suppose, is that there's no scalability. A penalty is a penalty, and therefore there's no scalability based on the type of offence.
In your opinion and in your experience, if we're looking at the PRA, does it make sense to have a sliding scale of penalties commensurate with the type of offence? For malicious phishing—terrible—it would be high, with a scale for others. How might we look at that?