Thank you very much.
In this context, Bill C-22 has metadata retention requirements where metadata is to be held for up to 12 months. Yesterday, we heard from officials that in Australia they keep it for two years. In the U.K., they keep it for one year.
Would you say that requiring core providers to retain metadata for 12 months is a reasonable time frame, given the fact of how quickly providers may otherwise delete the data? Sometimes it's 30 days. Sometimes it's three months.
This is still remaining flexible for providers and supportive of investigators, especially when complex cases can go beyond three to six months or even over a year.
