The reason I say that is there is a case study we can use. Mr. Therrien knows well about this.
In the holiday season of 2021, Telus was selling data to the Public Health Agency of Canada. Canadians who went out during a lockdown to visit the pharmacy or went to the grocery store were tracked, and that data was sold to the Canadian government.
We did then talk about this in the ethics committee.
Mr. Therrien, you were very succinct in your comments. There were two parts to this. There was not implied consent. You noted, “While there is reference to 'data for good' programs somewhere in the Telus privacy policies, while the government does make an effort to inform citizens...I do not think anyone would seriously argue that most users knew how their data would be used.”
I'm trying to back this up. My real question is, does this act, with your amendments, fix that situation?
I'm going to ask Mr. Kardash that first.
Mr. Therrien, the question for you afterwards would be this: Does this act go far enough to address the consent model we're looking for if this were to ever happen again?
Mr. Kardash, I'll start with you.