I appreciate that, Minister, but I don't think the bill does that.
I will draw your attention, first of all, to the fact that it does require expressed consent. It also requires expressed consent for new purposes. However, proposed subsection 15(7) says that implied consent is okay. Then proposed subsections 18(2) and 18(3) are issues, because proposed subsection 18(2) contains a list of activities that are exempt from expressed consent. Most disturbingly, proposed subsection 18(3) says that the legitimate interests of a business, in its decision-making process, to use your data for things that you did not give them permission for, even if it harms the individual, is okay. It strikes me that the balance in this act in particular, because of proposed subsection 18(3), is in favour of business over the right of the individual to protect their privacy.