I'm happy to start and then turn to my colleagues.
Essentially, you're right. There are some considerations that should be brought to bear on some of the pieces of paragraphs (f), (g) and (h).
As we spoke about at the last meeting, it's specifically been noted by the Privacy Commissioner that in two provinces, driver's licence information is not actually deemed to be personal information. It's important to segregate the driver's licence—because that's not what this amendment says—from the driver's licence number, which is what is specified. There's lots of personal information on our driver's licence, for sure, but what's being requested to be considered sensitive is the driver's licence number, which in two provinces has already been deemed by the Privacy Commissioner to not be personal information. Therefore, giving it the status of sensitive information not only heightens that, but actually requires express consent.
We've already been over financial data, but passwords often also have context that potentially should be considered.
With that, I will turn to my colleagues to further elucidate some of the issues in the back end of the list.