Let me start with one area where British Columbia, in my view, is behind. It is behind federally. That is on the issue of mandatory breach notification. There is no obligation on private sector companies in this province to report to my office when there is a breach that would cause a real risk of significant harm. Most importantly, there is no obligation on those companies to report it to individuals who are affected. This is something that needs to be changed.
There is a raft of other very good provisions that exist in other legislation, including Quebec's. I'm thinking of Commissioner Poitras' ability to oversee biometrics in the province, which is a burgeoning area and one that impacts people significantly. Facial recognition technology...all those kinds of things, where there is an obligation in Quebec to report the implementation of those kinds of programs. I think that is something British Columbia ought to be looking at.
The automated decision-making processes included in Bill C-27 should be, I think, incorporated in British Columbia, as well. However, I would urge British Columbia's government to go a step further than what is in Bill C-27. Again, Commissioner Dufresne has already alluded to what he believes—and we completely support this—are improvements to those provisions.