As the bill reads, you “take measures”, but essentially, those are internal.... There's no retention period, for example, which is often something that we see.
Is there any way you can provide the committee with the specific measures you take to protect the privacy of information collected under section 24?