Madam Speaker, there is a provision in the bill that says a small business has to designate a specific person responsible for maintaining these privacy databases. When we are talking about a small business with just a few employees, oftentimes a sole proprietor may be running the books, sales or the website, and they are now being told that they have to also be the designated privacy CO of their company. That is adding red tape for a small business. For a big business, it is not that big, as it probably already has those positions laid out.
Small businesses trying to maintain those databases and having the ability to keep all the data they are collecting, so as to be ready to comply with requests from the consumer and Privacy Commissioner to hand over the data at any time, creates a ton of paperwork for small businesses. We need to look at a better way to do this to ensure that we can protect the privacy of Canadians, but not put too many onerous requirements on small businesses.