Information & Ethics committee  We are talking about all issues relating to privacy. We're talking about trends, and we're looking at what to expect in terms of law reform and evolving technology. We haven't spoken about this specific topic.

Information & Ethics committee  We know that spyware was used because the RCMP confirmed it. What we want to see is the privacy impact assessment for the program.

Information & Ethics committee  I will repeat what I said about the information we received about what took place. Other witnesses will be able to share their experiences.

Information & Ethics committee  Mr. Smolynec may be able to say more about that. I do think we would share our findings with them to ensure that privacy is protected.

Information & Ethics committee  We have consultation mechanisms for the government and for the business community. Organizations are able to reach out to us about potential initiatives. We conduct assessments on a case-by-case basis, so we can provide feedback and advice on privacy considerations.

Information & Ethics committee  If we identify a gap and we weren't contacted, it is possible to file a complaint in some cases or to proactively initiate discussions with the organization in others. Mr. Smolynec may have more to say on that.

Information & Ethics committee  No, we wouldn't do nothing.

Information & Ethics committee  This issue has captured the public's attention, especially thanks to this study. The issue is under the media spotlight. Canadians are concerned about anything having to do with their digital tools.

Information & Ethics committee  I think these are questions that could be asked of the RCMP members. My focus is with respect to my office's role being consulted on the privacy impact assessment. I look forward to seeing that at the end of August. I would have liked my office to have seen that already, but, looking forward, we will review it, and we'll provide our best advice to ensure that this properly takes into consideration the privacy of Canadians.

Information & Ethics committee  I don't have any evidence that this is the case. I look forward to receiving the information on the use of those tools at the end of August.

Information & Ethics committee  No. What I'm talking about with privacy impact assessments is really looking at the program as a whole at a macro level—not looking at an individual decision made in an individual case. Rather, it would be looking at the process. What are the criteria? What are the safeguards that could be put in place?

Information & Ethics committee  There is private sector privacy legislation, which raises these types of issues in terms of collection and use by private organizations. Again, the specific privacy-intrusive tools are going to be looked at differently, whether they're used for purely commercial purposes or for a public interest purpose by law enforcement authorities.

Information & Ethics committee  I think the PIA process, the way that it's described in the Treasury Board policy and the way it is described in the advice by my office on what we look for in PIAs, is very comprehensive. It balances risk. It looks at situations in their proper context, and it puts the efforts where they need to be put, and it is something that can achieve public interest goals while protecting fundamental privacy rights.

Information & Ethics committee  I think privacy breaches are always something that we have to be guarding against, and my office should be informed of them when they occur, and the more sensitive the information an organization holds, the stronger the protection should be in terms of those breaches. That's fundamentally important.

Information & Ethics committee  From what I see in the reports about the use of software like Pegasus directed at citizens without authorization, these are concerning allegations. This is something that, if it occurred in Canada, would certainly raise concerns.