Okay. I think we're getting somewhere on understanding what the clause was intended to mean, which, in my view, reinforces why I wanted to move the subamendment. Whether you agree with it or not, that's fine. We can differ on that.
Just to clarify, though, Mr. Wong, the BQ-3 amendment does include IP addresses, so that's not accurate. That was also included in the Privacy Commissioner's recommendation. Narrowing it to a finite list of discrete identifiers does include IP addresses. It's just written out—Internet protocol address—in the clause. That's an important bit of information, but it would be included.
I just want to push back a bit on the idea that if we create an exhaustive list, we're going to hamstring ourselves in the future. From a philosophical position, my view would be that that's okay; that's the law-making process. Parliament passes law. Those who utilize it or implement it do so. Then the courts interpret it, and then it flows back to Parliament to say, “Does it need to be...?” If Parliament is not satisfied with the law or with how it's operating, then we can legislate again.
I think there can be good-faith disagreement on how the feedback loop—if I can describe it as a feedback loop—in the legislation-making process—the enforcement and then the interpretation—should work. Different laws take a different view on that, including whether there's regulation-making ability or whether agencies develop policies to interpret their own.... There's a whole spectrum of how that works.
I would say that it's a fine result. I think you need to make a more persuasive argument to me that says in this specific case, having the non-exhaustive list here, then requiring the police to give feedback to Public Safety and then requiring Public Safety to bring that to Parliament through the appropriate channels is not the best way to do that, for whatever reason. I haven't really heard that.
The evidence I will put to you for why I haven't heard that is that at our last meeting, I asked you, Ms. Wong and Ms. Gibner, if there was anything not included in this definition that you thought needed to be included, and you could not give me any examples. Then I asked Sergeant Gilkes, and your response was, “I think that the categories cover most of the identifiers that I would look for.”
The evidence you have provided to the committee is that the list is actually pretty good. It covers what we understand to be what police, Public Safety and CSIS need right now. If in three or five years it changes, that's great. Come tell us, and Parliament can consider changes.
To me, that's a good balance, because right now without the amendment, as we've established, we're talking about it meaning subscriber information, but the subcategories are non-exhaustive, so more things could be included. I think that's why the Privacy Commissioner honed in on this—I think so, but I don't know, and this is why I'd like someone here so that I could ask them—and suggested that a lot of information could be required. It's not just that it's a lot of different types of information. It's that the different types of information that could be required attract different levels of privacy. The Privacy Commissioner makes this point by saying, “Depending on the nature of the services in question, such information could reasonably attract a heightened expectation of privacy.”
Would you disagree with this, Ms. Gibner? Depending on the class of information and subscriber information, there may be different expectations of privacy attached to that. Is that fair?