I do.
During clause-by-clause consideration, we have continued to meet partners. I honestly wondered how I could improve the bill by putting limits on something I find disquieting. Let me explain.
We've learned that Canadian Internet service providers have subcontracted the management of all their infrastructure, even its design, outside Canada. I'll give you an example. An Internet service provider that I won't name has subcontracted all maintenance and management of its infrastructure to a company located in India. In other words, if there was a problem in a cell tower, for example, to get the repairs done, a worker in India would have to press a button.
I'm wondering how our personal information is protected, since it's in another country that has its own rules and spies on us too. It's documented. How is it that we couldn't prevent an Internet service provider from outsourcing its work to a country like India, for example, despite all the risks we're aware of?
I have another example. I learned that another Internet service provider's infrastructure was being managed from Egypt. However, I learned that in Egypt, all telecommunications are nationalized, meaning that Egypt can order a provider to provide data and the provider has to comply. How can we allow our data to be administered and hosted by subcontractors used by providers here at home?
I know that the Minister of Industry is well aware of this and she was unable to block the transaction for all kinds of reasons. Our rules of the game have allowed this, and I think companies want to make as much profit as possible. So they play with the rules, going as far as they can. As a legislator, I wondered what I could do in terms of damage control and, as much as possible, to secure our Internet infrastructure that's managed outside Canada. We spoke with the legislative counsel, who proposed this amendment to us. It's not perfect protection, but it brings to light the current problem, which is that we're allowing our Internet service providers to use foreign workers and have our data hosted abroad, in a context where we're talking about cyber-attacks, among other things. I'd like to hear what Mr. Arbour has to say about this.
How can we ensure that our data will remain confidential and will not be used by India or Egypt, for example, when everything is managed in their country?
I know that what I'm proposing is not ideal, but at least it tries to set some limits on this. I hope the government will find a solution to avoid the worst-case scenario. I know they are already aware of the problem and looking for a solution. So I humbly propose this amendment to try to reduce the risks, knowing full well that it's not perfect, but that it's better than nothing.
I find it extremely serious that, with the full knowledge of the government, all of our data have ended up in India or Egypt, for example. I don't want to name the two Internet service providers, but I think you're familiar with them. They're the ones who outsourced the management of their infrastructure. I was even told that infrastructure design mandates had been entrusted to companies outside Canada.
I hope this new clause I'm proposing will be helpful. I know very well that it doesn't fill all the gaps, but it does provide somewhat of a framework.