You're the first one I'm aware of, actually, who's raised section 21 of the proposed act, so thank you for doing that.
When I read it, it's yet another clause that says that an organization can use somebody's information without their knowledge or consent for internal research.
From a positive perspective, I use data for internal research all the time, and it says it has to be de-identified first. I often was looking at individual customer data through loyalty programs, or if I actually had a coalition program like Air Miles, I had a lot of collected data on individuals to do them.
Would this inhibit a company from doing what they've done in the past—a retailer, for example— in analyzing coalition loyalty rewards programs or their own in-house loyalty programs?