Well, there are safeguards that are put in place for the use of that exception. There is a test that needs to be met, depending on the exception that you're going to apply. There are safeguards, such as a legitimate interest analysis, that are detailed in the draft bill. All of that is in addition to requirements for a privacy impact assessment or something that looks like it.
There is an analysis that has to go into effect. In addition, at first instance, you have to meet the threshold test of reasonableness. Is the use or collection within the reasonable expectation of the individual?
Ultimately, you may have to submit that brief to the Privacy Commissioner if there is a question.
This is all to say that there are reasonable safeguards put in place to prohibit the flagrant misuse of that consent exception.