I mentioned one aspect with respect to the scope of the organizations captured, so that may be something that would require a change to the statute. However, yes, as to the regulations, we recommend necessity and proportionality. We recommend no tracking of individuals with this information. These are consistent with international best practices and agreements between my colleagues.
They could be put into regulations. If the statute adds the criteria, it just provides more certainty that the government will follow through on that. Either way, I will certainly be making recommendations to the government at the recommendation stage with respect to those contents.