Obviously the risk is there. How big it is I think is difficult to determine.
Some of the programs track—quite well, actually—the errors, if you will, in payments that are made inappropriately or errors in payments. I think the old age security does that, or the employment insurance. They actually publish yearly what those overpayments or errors in payments are. The social insurance number, as I mentioned earlier, is not the only document used to obtain these benefits, but the social insurance number is one of these base documents or foundation documents for establishing identity, so it's very important that the controls over that be rigorous.
When the social insurance number was introduced, it was really introduced as a file identifier. We note that the usage has expanded considerably since then, both within government and outside. That's why the policy needs to be looked at, why clearer guidance needs to be given to departments on its use, and why consideration needs to be given on its use as well in the private sector.