I think Canadian privacy law largely meets global standards, although we've started to see the European Union in particular, through something known as the GDPR, elevate those standards. I think we're going to rapidly face some challenges if the EU starts digging into whether or not we continue to meet those standards.
In terms of compliance domestically, we have a Privacy Commissioner, who of course enforces the anti-spam rules. It's a shared responsibility between the commissioner and the Competition Bureau and the CRTC. We have a number of players there on the domestic front.
How Canada can help develop better privacy protections on a global basis, particularly when Canadians may purchase or engage with foreign entities, to ensure there is adequate privacy protection, that's where there is, I suppose, the potential for trade agreements to play a role.
As I mentioned in my earlier response to Mr. Allison, it seems that one of the challenges we're facing is that the extent to which we're negotiating with the United States.... The U.S. has not been a particularly strong supporter of strong privacy protections. It tends to adopt more of an “anything goes” approach. As long as you disclose what it is that you're going to do and someone agrees to it, then so be it. I'd argue that's a bit of a fiction. Most people don't know the kinds of things they are clicking their way into.
Developing baseline standards of privacy protection is an important thing to do, certainly domestically. Also, as we enter into some of these trade agreements, whether NAFTA or TPP 11, or perhaps some others, we need to ensure that we establish an appropriate benchmark in those agreements.