Where I'm going with this is that when I read subclause 11(2), it's my view that an appropriate balance can be struck based on the instructions that this section gives us in terms of how the regulations should operate. In other words, data is only to be used for age verification. It's not to be used for any other reason and it is to be destroyed once the goal—as in age verification—has been accomplished.
To me, that seems like it's going fairly far in addressing any privacy concerns. The whole point here is to preclude children from accessing harmful information.
We're saying that they have to record it only for this purpose, they can't use it for any other purpose, and they must destroy it. I'm just trying to see how we could actually go any further in regulation than that.