If I could pick up on the idea that if you're not doing anything wrong you have nothing to worry about, in fact, in the national security context, that it is absolutely untrue. The purposes of acquiring the bulk datasets that the U.K. and Canada seem very keen on acquiring are for data analytics and profiling. Profiling is exactly the sort of scenario in which you find yourself enmeshed in a national security net and you have done nothing wrong. You simply meet the profile.
We need to appropriately understand what is happening with those datasets. We have had no means of doing that so we can constrain the cases in which we are impinging on the security of individuals in the name of national security. We have mislearned all of the lessons of Arar and Iacobucci and every other inquiry that has looked at that.