I'm sorry to interrupt.
I'm looking at the actual legislation itself, the bill. There are clear safeguards. It says that the information can be collected without their knowledge and consent if it's used for the purpose of a business activity, but proposed paragraph 18(1)(a) says that there are conditions. One is that “a reasonable person would expect the collection or use”—of that information—“for such an activity”. More importantly is proposed paragraph (b), that “the personal information is not collected or used for the purpose of influencing the individual’s behaviour or decisions.”
It's very clear there's a safeguard in the bill itself that the information that's collected can't be used against that individual.