Mr. Speaker, we have said a number of times that the Privacy Act has to be obeyed by all Canadian agencies and that includes the CSE.
The databank at the CSE is exempt from the provisions of the Privacy Act. That does not obviate the fact that all activities of the Communications Security Establishment follow the law explicitly. This has been affirmed by the former privacy commissioner, Mr. John Grace.
At the present time the privacy commissioner is conducting an ongoing audit to update him and his agency with respect to the activities of that particular organization as it applies to the Privacy Act.