The challenge here is going to be for CSIS or whoever to set up a process.
To pick an example, one of your next witnesses is from the Business Council of Canada. CSIS is going to want to have a relationship with the Business Council where they can share classified information. What does that mean in practice? Are they going to have to security clear them? Are they going to have a parallel system?
A lot of it will be in the implementation, but the act itself provides a legislative framework that is pretty good.