Certainly.
There are two key areas there. One is about personal information that could be shared with ministerial authorization, and there's information that doesn't contain personal information but can be shared more broadly for building resiliency.
In terms of what the minister can share, including personal information, we're concerned that's being opened up to any person or entity. We have grave concerns about international information-sharing and how that can have effects on the rights of Canadians who are travelling or people abroad. So we think there should be greater safeguards around how even ministerial authorizations can be shared.
It's important to note that under that there's a safeguard that requires that those kinds of disclosures be reported to the National Security and Intelligence Review Agency, and that's a very important safeguard. Unfortunately, under the new provisions for sharing information for resiliency, no such safeguard exists, so we think that maybe one of the things that could be considered is that there be reporting and transparency when CSIS is sharing that information for resiliency. The reason for that is, as I mentioned, that there have been reports, through NSIRA and others, about how the information is used as a follow-through. For example, even when CSIS shares information through its threat-reduction measures, NSIRA found that they don't take responsibility for charter breaches that could arise from how that information is being shared.
We think that having more accountability and transparency, even if it's just with NSIRA, could help to ensure that there's follow-up and some kinds of ways to ensure that it's not being used to violate the charter. Also, it could help to ensure that the veracity and accuracy of that information is being shared, because as we've heard today, sometimes that's at issue, too, in what CSIS is sharing. If it's shared with a university, how would they know whether or not it's accurate or right unless there were some kind of follow-up by another body?