It's a very interesting question, which ties in nicely with the question Mr. Murphy asked in relation to the use of the term “information” in the Criminal Code. The Criminal Code's dealings with information are a fairly new development in the criminal law, and one of the reasons why identity theft and pretensing are issues is that existing criminal offences for theft and false pretense and even fraud are all aimed at deception or taking something “of value”. The courts have said that information is not “of value” in that way, because someone can obtain information, but the person whose information it is, is not thereby deprived of that information.
So the only thing that is lost is control of the information, perhaps privacy of the information, and as well, the risk is created as to how that information might be used, but the person to whom the information relates has not suffered theft or fraud or false pretense the way these things are defined in the Criminal Code. That had always been the case, and in the early 1980s, I think it was, when credit cards were becoming a major form of payment, credit card information was acknowledged as a specific type of information that was not caught by the general provisions of theft and fraud and false pretense of the Criminal Code, because it's merely information.
So specific credit card offences were enacted. They were the first form of identity theft offences, you might say, because they targeted the information itself, which has no value in itself but has value for what it provides access to. That's the way in which information is different from the regular types of property the criminal law is concerned with.
So on the issue of credit cards, we do have long-standing offences in the Criminal Code, which is not to say they're easy to prove in any given case, but they do cover the full range of activities fairly comprehensively. So it isn't merely using a credit card, but it's also an offence to possess a credit card, whether it's an authentic credit card or a forged or falsified credit card, if you know that it was obtained or altered by the commission of a crime. So if someone is caught in possession of dozens and dozens of credit cards, there may be, under the circumstances, a fairly strong inference that the person knew those credit cards had been obtained by the commission of an offence.
There are also offences for possession, use, and trafficking in credit card data, so even if you don't have someone found in possession of the cards themselves, whether they're authentic cards or forged cards, if they've got lists and lists of just the numbers, that can also be an offence. This is not to diminish the law enforcement challenges that may be out there in terms of proving these cases, but on the credit card issue, the law got out a long time ago.