We'll investigate it. We'll make a finding. We'll make recommendations. In many cases, but not all, the recommendations are followed, and that's a good thing. That's where the order-making power comes in.
In the case of privacy impact assessment, it's required in Treasury Board policy. It's there. It has to be done before the program is launched. We have to be informed. We have to be consulted. It doesn't always happen. Sometimes it will happen after the program has been launched, which creates more risk for everyone.