Our position is there's a way in which a process of exemption should be curtailed, and you keep control over when and how you give the exemption. You should certainly have parliamentary oversight about which countries you're allowing the sharing to be with. You should also demand some assurances. We do that all the time with countries. We ask for assurances. You keep monitoring, because sometimes the assurances are not always adhered to.
So there are ways in which you can recognize that; we want to be in an environment where there is free access and so on, but we want to preserve some control over the process of exemptions.
To answer further, the EU is a really good model, but it's a model that has privacy at its forefront. If we are going this route, we're quite happy to go this route as it has a much stronger support for privacy. I think that's something to do, to look elsewhere in the world where they have protected privacy. That may be useful as well.