I've talked about the ability to levy fines, some substantial fines. To my way of thinking, when you think of some of these multinational organizations, the fine in itself could simply be considered a cost of doing business.
Are there any additional remedies that you would say a privacy commissioner should have, for example, to disgorge the data that was assembled or to discontinue production?