I'll start, and then I'll turn to Mr. Chhabra.
As Mr. Chhabra noted, “sensitive” comes up in a number of places in the bill, the most important of which notes what you can't rely on as a use of information if the information is deemed sensitive, which is the example he just went through with Mr. Vis. We've cited a two-part test, essentially, for things like implied consent, and you can't rely on implied consent if the information is deemed sensitive, which means that it requires express consent.
Just to go back to last week's discussion, that's not to suggest that things like your driver's licence number or your personal information of a financial nature have zero protections. They have considerable protections, and by allowing, through guidance-making powers, the OPC to opine on these issues, you can get to effective oversight of that information without necessarily suggesting that in every instance, they require express consent, which is the most important part of what happens when you deem something sensitive.
I'll turn to Mr. Chhabra just to lay out again where “sensitive” comes up in the bill.