I'm going to start, and my colleague may supplement.
First, part 1 involves regulatory obligations on the private sector. If CSE says that there's a problem and that they recommend we patch our system, then that can be done incredibly quickly, and it's voluntary.
If we are talking about a legal obligation on the private sector, it has to go through an existing set of procedural requirements to come to that. Judicial review of those types of decisions takes 12 to 18 months, so there is a very high risk that, if this amendment were to be adopted, the powers under this act would be inoperable—not practical to be implemented—to a degree that makes me very concerned.